https://ops.docs.72602.space/kubernetes/proxy/index.html Daocloud Binary Daocloud Image KubeVPN Hugo en Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/kubernetes/proxy/daocloud_binary/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/kubernetes/proxy/daocloud_binary/index.html 使用方法 在原始 URL 上面加入 files.m.daocloud.io 的 前缀 就可以使用。比如： # Helm 下载原始URL wget https://get.helm.sh/helm-v3.9.1-linux-amd64.tar.gz # 加速后的 URL wget https://files.m.daocloud.io/get.helm.sh/helm-v3.9.1-linux-amd64.tar.gz 即可加速下载, 所以如果指定的文件没有被缓存, 会卡住等待缓存完成, 后续下载就无带宽限制。 最佳实践 使用场景1 - 安装 Helm cd /tmp export HELM_VERSION="v3.9.3" wget "https://files.m.daocloud.io/get.helm.sh/helm-${HELM_VERSION}-linux-amd64.tar.gz" tar -zxvf helm-${HELM_VERSION}-linux-amd64.tar.gz mv linux-amd64/helm /usr/local/bin/helm helm version 使用场景2 - 安装 KubeSpray 加入如下配置即可： files_repo: "https://files.m.daocloud.io" ## Kubernetes components kubeadm_download_url: "{{ files_repo }}/dl.k8s.io/release/{{ kubeadm_version }}/bin/linux/{{ image_arch }}/kubeadm" kubectl_download_url: "{{ files_repo }}/dl.k8s.io/release/{{ kube_version }}/bin/linux/{{ image_arch }}/kubectl" kubelet_download_url: "{{ files_repo }}/dl.k8s.io/release/{{ kube_version }}/bin/linux/{{ image_arch }}/kubelet" ## CNI Plugins cni_download_url: "{{ files_repo }}/github.com/containernetworking/plugins/releases/download/{{ cni_version }}/cni-plugins-linux-{{ image_arch }}-{{ cni_version }}.tgz" ## cri-tools crictl_download_url: "{{ files_repo }}/github.com/kubernetes-sigs/cri-tools/releases/download/{{ crictl_version }}/crictl-{{ crictl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz" ## [Optional] etcd: only if you **DON'T** use etcd_deployment=host etcd_download_url: "{{ files_repo }}/github.com/etcd-io/etcd/releases/download/{{ etcd_version }}/etcd-{{ etcd_version }}-linux-{{ image_arch }}.tar.gz" # [Optional] Calico: If using Calico network plugin calicoctl_download_url: "{{ files_repo }}/github.com/projectcalico/calico/releases/download/{{ calico_ctl_version }}/calicoctl-linux-{{ image_arch }}" calicoctl_alternate_download_url: "{{ files_repo }}/github.com/projectcalico/calicoctl/releases/download/{{ calico_ctl_version }}/calicoctl-linux-{{ image_arch }}" # [Optional] Calico with kdd: If using Calico network plugin with kdd datastore calico_crds_download_url: "{{ files_repo }}/github.com/projectcalico/calico/archive/{{ calico_version }}.tar.gz" # [Optional] Flannel: If using Falnnel network plugin flannel_cni_download_url: "{{ files_repo }}/kubernetes/flannel/{{ flannel_cni_version }}/flannel-{{ image_arch }}" # [Optional] helm: only if you set helm_enabled: true helm_download_url: "{{ files_repo }}/get.helm.sh/helm-{{ helm_version }}-linux-{{ image_arch }}.tar.gz" # [Optional] crun: only if you set crun_enabled: true crun_download_url: "{{ files_repo }}/github.com/containers/crun/releases/download/{{ crun_version }}/crun-{{ crun_version }}-linux-{{ image_arch }}" # [Optional] kata: only if you set kata_containers_enabled: true kata_containers_download_url: "{{ files_repo }}/github.com/kata-containers/kata-containers/releases/download/{{ kata_containers_version }}/kata-static-{{ kata_containers_version }}-{{ ansible_architecture }}.tar.xz" # [Optional] cri-dockerd: only if you set container_manager: docker cri_dockerd_download_url: "{{ files_repo }}/github.com/Mirantis/cri-dockerd/releases/download/v{{ cri_dockerd_version }}/cri-dockerd-{{ cri_dockerd_version }}.{{ image_arch }}.tgz" # [Optional] runc,containerd: only if you set container_runtime: containerd runc_download_url: "{{ files_repo }}/github.com/opencontainers/runc/releases/download/{{ runc_version }}/runc.{{ image_arch }}" containerd_download_url: "{{ files_repo }}/github.com/containerd/containerd/releases/download/v{{ containerd_version }}/containerd-{{ containerd_version }}-linux-{{ image_arch }}.tar.gz" nerdctl_download_url: "{{ files_repo }}/github.com/containerd/nerdctl/releases/download/v{{ nerdctl_version }}/nerdctl-{{ nerdctl_version }}-{{ ansible_system | lower }}-{{ image_arch }}.tar.gz" 实测下载速度可以达到Downloaded: 19 files, 603M in 23s (25.9 MB/s), 下载全部文件可以在 23s 内完成！ 完整方法可以参考 https://gist.github.com/yankay/a863cf2e300bff6f9040ab1c6c58fbae https://ops.docs.72602.space/kubernetes/proxy/daocloud_image/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/kubernetes/proxy/daocloud_image/index.html 快速开始 docker run -d -P m.daocloud.io/docker.io/library/nginx 使用方法 增加前缀 (推荐方式)。比如： docker.io/library/busybox | V m.daocloud.io/docker.io/library/busybox 或者 支持的镜像仓库 的 前缀替换 就可以使用。比如： docker.io/library/busybox | V docker.m.daocloud.io/library/busybox 无缓存 在拉取的时候如果Daocloud没有缓存, 将会在 同步队列 添加同步缓存的任务. 支持前缀替换的 Registry (不推荐) 推荐使用添加前缀的方式. 前缀替换的 Registry 的规则, 这是人工配置的, 有需求提 Issue. 源站 替换为 备注 docker.elastic.co elastic.m.daocloud.io docker.io docker.m.daocloud.io gcr.io gcr.m.daocloud.io ghcr.io ghcr.m.daocloud.io k8s.gcr.io k8s-gcr.m.daocloud.io k8s.gcr.io 已被迁移到 registry.k8s.io registry.k8s.io k8s.m.daocloud.io mcr.microsoft.com mcr.m.daocloud.io nvcr.io nvcr.m.daocloud.io quay.io quay.m.daocloud.io registry.ollama.ai ollama.m.daocloud.io 最佳实践 加速 Kubneretes 加速安装 kubeadm kubeadm config images pull --image-repository k8s-gcr.m.daocloud.io 加速安装 kind kind create cluster --name kind --image m.daocloud.io/docker.io/kindest/node:v1.22.1 加速 Containerd 参考 Containerd 官方文档: hosts.md 如果您使用 kubespray 安装 containerd, 可以配置 containerd_registries_mirrors 加速 Docker 添加到 /etc/docker/daemon.json https://ops.docs.72602.space/kubernetes/proxy/kubevpn/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/kubernetes/proxy/kubevpn/index.html 1.install krew download and install krew Add the $HOME/.krew/bin directory to your PATH environment variable. export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Run kubectl krew to check the installation kubectl krew list 2. Download from kubevpn source from github kubectl krew index add kubevpn https://gitclone.com/github.com/kubenetworks/kubevpn.git kubectl krew install kubevpn/kubevpn kubectl kubevpn 3. Deploy VPN in some cluster Using different config to access different cluster and deploy vpn in that k8s. kubectl kubevpn connect If you wanna connect other k8s … kubectl kubevpn connect --kubeconfig /root/.kube/xxx_config Your terminal should look like this: ➜ ~ kubectl kubevpn connect Password: Starting connect Getting network CIDR from cluster info... Getting network CIDR from CNI... Getting network CIDR from services... Labeling Namespace default Creating ServiceAccount kubevpn-traffic-manager Creating Roles kubevpn-traffic-manager Creating RoleBinding kubevpn-traffic-manager Creating Service kubevpn-traffic-manager Creating MutatingWebhookConfiguration kubevpn-traffic-manager Creating Deployment kubevpn-traffic-manager Pod kubevpn-traffic-manager-66d969fd45-9zlbp is Pending Container Reason Message control-plane ContainerCreating vpn ContainerCreating webhook ContainerCreating Pod kubevpn-traffic-manager-66d969fd45-9zlbp is Running Container Reason Message control-plane ContainerRunning vpn ContainerRunning webhook ContainerRunning Forwarding port... Connected tunnel Adding route... Configured DNS service +----------------------------------------------------------+ | Now you can access resources in the kubernetes cluster ! | +----------------------------------------------------------+