Virtual Kubelet 虚拟节点

apiVersion: v1
kind: Pod
metadata:
  name: nginx
spec:
  # 如pod无需和api server通信，则建议不挂载token。在pod spec中加入以下字段跳过挂载
  # 如果必须使用service account token, 参考下方关于 「1.22版本service account token自动挂载问题」 的说明
  automountServiceAccountToken: false
  # 通过 nodeSelector 调度到 VK 节点，nodeName 及 nodeSelector 只需配置一项
  # 如以 Deploy 及 Sts 形式创建，请务必使用 nodeSelector
  # 虚拟节点创建后，也可为虚拟节点添加指定标签，用于 Pod 调度的管理
  nodeSelector:
    type: virtual-kubelet
  # 通过指定 nodeName 调度到 VK 节点
  # nodeName: uk8s-xxxxxxxx-vk-xxxxx
  # 添加节点容忍
  tolerations:
  - key: virtual-kubelet.io/provider
    operator: Equal
    value: 安联云
    effect: NoSchedule
  containers:
  - name: nginx
    image: uhub.an-link.com/ucloud/nginx:latest
    # 通过以下参数指定Pod资源配置 (如果不使用默认配置)，具体支持规格参考下方
    resources:
      requests:
        cpu: "2"
        memory: 2048Mi

automountServiceAccountToken: false

apiVersion: v1
kind: Secret
metadata:
  name: default-token
  annotations:
    kubernetes.io/service-account.name: default
type: kubernetes.io/service-account-token

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
  labels:
    app: nginx
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      # 指定部署到虚拟节点
      nodeSelector:
        type: virtual-kubelet
      tolerations:
      - effect: NoSchedule
        key: virtual-kubelet.io/provider
        operator: Equal
        value: 安联云
      serviceAccount: default
      containers:
      - name: nginx
        image: uhub.an-link.com/ucloud/nginx:latest
        ports:
        - containerPort: 80
        # 显式挂载
        volumeMounts:
        - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
          name: default-token
          readOnly: true
      volumes:
      # 显式指定secret形式的volume
      - name: default-token
        secret:
          defaultMode: 420
          secretName: default-token # 1.22版本中加上token后缀
 

## 创建存储类 StorageClass
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: ssd-csi-udisk
provisioner: udisk.csi.ucloud.cn
parameters:
## 建议使用 SSD 或 SATA 云盘，避免因 RSSD 云盘 RDMA 区域与 Cube 无法匹配导致云盘无法挂载
  type: "ssd"
## 不支持 xfs 文件系统
  fsType: "ext4"
## 回收策略，支持Delete和Retain，默认为Delete，非必填
reclaimPolicy: Delete
## 如绑定模式设置为 WaitForFirstConsumer，则只能通过 pod.spec.nodeSelector 指定 VK 节点
volumeBindingMode: WaitForFirstConsumer
allowVolumeExpansion: true # 声明该存储类支持可扩容特性
---
## 创建持久化存储卷声明 PVC
## 不支持 Volume Expansion（存储卷动态扩容）
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: logdisk-claim
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: ssd-csi-udisk
  resources:
    requests:
      storage: 20Gi
---
## 在 Pod 中使用 PVC
apiVersion: v1
kind: Pod
metadata:
  name: nginx
spec:
  tolerations:                               
  - effect: NoSchedule
    key: virtual-kubelet.io/provider
    operator: Equal
    value: 安联云
## 如绑定模式设置为 WaitForFirstConsumer，则只能通过 pod.spec.nodeSelector 指定 VK 节点
  nodeSelector:
    type: virtual-kubelet
  containers:
  - name: http
    image: uhub.an-link.com/ucloud/nginx:latest
    volumeMounts:
    - name: log
      mountPath: /data
  volumes:
  - name: log
    persistentVolumeClaim:
      claimName: logdisk-claim

cat > .dockerconfigjson <<EOF
{
  "auths": {
    "myhub.an-link.com": {
      "username": "user-xxx",
      "password": "passwd-yyy",
      "registryaddr": "10.x.y.z",
      "vpcid": "uvnet-xxx"
    }
  }
}
EOF
kubectl create secret docker-registry myhub --from-file=.dockerconfigjson

apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-myhub-deployment
  labels:
    app: nginx
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nginx
  template:
    metadata:
      labels:
        app: nginx
    spec:
      automountServiceAccountToken: false
      nodeSelector:
        type: virtual-kubelet
      tolerations:
      - key: virtual-kubelet.io/provider
        operator: "Equal"
        value: 安联云
        effect: NoSchedule
      containers:
      - name: nginx
        image: myhub.an-link.com/test/nginx:latest
        ports:
        - containerPort: 80
      imagePullSecrets:
      - name: myhub