存储与配置

apiVersion: v1
kind: Pod
metadata:
  name: redis-pod
spec:
  containers:
    - name: redis
      image: redis
      volumeMounts:
        - mountPath: /data/redis
          name: redis-storage
  volumes:
    - name: redis-storage
      emptyDir: {}         # 磁盘存储
      # emptyDir:
      #   medium: "Memory" # 内存存储
      #   sizeLimit: 1Gi   # 大小限制

# local-storage.yaml
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: local-storage
provisioner: kubernetes.io/no-provisioner   # local 卷不支持动态创建
volumeBindingMode: Immediate

apiVersion: v1
kind: PersistentVolume
metadata:
  name: example-pv
spec:
  capacity:
    storage: 2Gi              # 容量
  volumeMode: Filesystem      # 卷模式：Filesystem / Block
  accessModes:
    - ReadWriteOnce           # 访问模式
  persistentVolumeReclaimPolicy: Delete  # 回收策略
  storageClassName: local-storage
  local:
    path: /mnt/disks/ssd1     # 此目录需手动创建
  nodeAffinity:               # local 卷必须指定节点亲和性
    required:
      nodeSelectorTerms:
        - matchExpressions:
            - key: kubernetes.io/hostname
              operator: In
              values:
                - work-node-1

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: task-pv-claim
spec:
  storageClassName: local-storage
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 2Gi

spec:
  containers:
    - name: mysql
      image: mysql:8.0.31
      volumeMounts:
        - mountPath: /var/lib/mysql
          name: data-volume
  volumes:
    - name: data-volume
      persistentVolumeClaim:
        claimName: task-pv-claim

# 查看集群中的 StorageClass
kubectl get sc

# 输出示例：
# NAME                   PROVISIONER             RECLAIMPOLICY   VOLUMEBINDINGMODE
# local-path (default)   rancher.io/local-path   Delete          WaitForFirstConsumer

volumes:
  - name: data-volume
    hostPath:
      path: /home/mysql/data
      type: DirectoryOrCreate

apiVersion: v1
kind: ConfigMap
metadata:
  name: mysql-config
data:
  mysql.cnf: |
    [mysqld]
    character-set-server=utf8mb4
    collation-server=utf8mb4_general_ci
    init-connect="SET NAMES utf8mb4"

    [client]
    default-character-set=utf8mb4

    [mysql]
    default-character-set=utf8mb4

# 作为存储卷挂载（最常用）
containers:
  - name: mysql
    image: mysql:8.0.31
    volumeMounts:
      - mountPath: /etc/mysql/conf.d
        name: conf-volume
        readOnly: true
volumes:
  - name: conf-volume
    configMap:
      name: mysql-config

# 编辑 ConfigMap
kubectl edit cm mysql-config

# 从文件创建
kubectl create cm my-config --from-file=app.conf

# 从目录创建（每个文件为一个 key）
kubectl create cm my-config --from-file=/path/to/config/dir

# 从字面量创建
kubectl create cm my-config --from-literal=key1=value1 --from-literal=key2=value2

apiVersion: v1
kind: Secret
metadata:
  name: mysql-password
type: Opaque
data:
  PASSWORD: MTIzNDU2Cg==   # Base64 编码的值（echo -n "123456" | base64）
---
# 或使用 stringData（明文，创建时自动编码）
apiVersion: v1
kind: Secret
metadata:
  name: mysql-password
type: Opaque
stringData:
  PASSWORD: "123456"       # 直接写明文

# 通过环境变量引用
containers:
  - name: mysql
    image: mysql:8.0.31
    env:
      - name: MYSQL_ROOT_PASSWORD
        valueFrom:
          secretKeyRef:
            name: mysql-password
            key: PASSWORD
            optional: false

# 从文件创建
kubectl create secret generic my-secret --from-file=password.txt

# 从字面量创建
kubectl create secret generic my-secret --from-literal=password=123456

# 创建镜像仓库 Secret
kubectl create secret docker-registry regcred \
  --docker-server=<registry> \
  --docker-username=<user> \
  --docker-password=<pass>