1
apiVersion: apps/v1
2
kind: Deployment
3
metadata:
4
  name: web-app
5
  labels:
6
    app: web-app
7
spec:
8
  replicas: 3
9
  selector:
10
    matchLabels:
11
      app: web-app
12
  strategy:
13
    type: RollingUpdate
14
    rollingUpdate:
15
      maxSurge: 1        # 滚动更新时允许超出副本数的最大 Pod 数
16
      maxUnavailable: 0   # 滚动更新时允许不可用的最大 Pod 数
17
  template:
18
    metadata:
19
      labels:
20
        app: web-app
21
    spec:
22
      containers:
23
        - name: web-app
24
          image: myapp:v2.0.0
25
          ports:
26
            - containerPort: 8080
27
          resources:
28
            requests:
29
              cpu: 100m
30
              memory: 128Mi
31
            limits:
32
              cpu: 500m
33
              memory: 512Mi
34
          readinessProbe:
35
            httpGet:
36
              path: /healthz
37
              port: 8080
38
            initialDelaySeconds: 5
39
            periodSeconds: 10
40
          livenessProbe:
41
            httpGet:
42
              path: /healthz
43
              port: 8080
44
            initialDelaySeconds: 15
45
            periodSeconds: 20

1
apiVersion: apps/v1
2
kind: StatefulSet
3
metadata:
4
  name: mysql
5
spec:
6
  serviceName: mysql     # 必须指定 Headless Service
7
  replicas: 3
8
  selector:
9
    matchLabels:
10
      app: mysql
11
  template:
12
    metadata:
13
      labels:
14
        app: mysql
15
    spec:
16
      containers:
17
        - name: mysql
18
          image: mysql:8.0
19
          env:
20
            - name: MYSQL_ROOT_PASSWORD
21
              valueFrom:
22
                secretKeyRef:
23
                  name: mysql-secret
24
                  key: root-password
25
          ports:
26
            - containerPort: 3306
27
          volumeMounts:
28
            - name: data
29
              mountPath: /var/lib/mysql
30
  volumeClaimTemplates:   # 为每个 Pod 自动创建独立的 PVC
31
    - metadata:
32
        name: data
33
      spec:
34
        accessModes: ["ReadWriteOnce"]
35
        storageClassName: ssd
36
        resources:
37
          requests:
38
            storage: 50Gi

1
apiVersion: apps/v1
2
kind: DaemonSet
3
metadata:
4
  name: fluentd
5
  labels:
6
    app: fluentd
7
spec:
8
  selector:
9
    matchLabels:
10
      app: fluentd
11
  template:
12
    metadata:
13
      labels:
14
        app: fluentd
15
    spec:
16
      tolerations:
17
        - key: node-role.kubernetes.io/control-plane
18
          effect: NoSchedule   # 允许在控制平面节点运行
19
      containers:
20
        - name: fluentd
21
          image: fluent/fluentd:v1.16
22
          resources:
23
            limits:
24
              cpu: 200m
25
              memory: 256Mi
26
          volumeMounts:
27
            - name: varlog
28
              mountPath: /var/log
29
            - name: containers
30
              mountPath: /var/lib/docker/containers
31
      volumes:
32
        - name: varlog
33
          hostPath:
34
            path: /var/log
35
        - name: containers
36
          hostPath:
37
            path: /var/lib/docker/containers

1
spec:
2
  template:
3
    spec:
4
      nodeSelector:
5
        node-type: worker   # 只在带有 node-type=worker 标签的节点运行
6
      # 或者使用更灵活的 affinity
7
      affinity:
8
        nodeAffinity:
9
          requiredDuringSchedulingIgnoredDuringExecution:
10
            nodeSelectorTerms:
11
              - matchExpressions:
12
                  - key: node-type
13
                    operator: In
14
                    values: ["worker", "infra"]

1
# 一次性数据迁移任务
2
apiVersion: batch/v1
3
kind: Job
4
metadata:
5
  name: data-migration
6
spec:
7
  completions: 1          # 需要 1 个 Pod 成功完成
8
  parallelism: 1          # 同时运行 1 个 Pod
9
  backoffLimit: 3         # 失败重试次数上限
10
  activeDeadlineSeconds: 300  # 任务最长运行时间
11
  template:
12
    spec:
13
      restartPolicy: Never   # Job 不使用 OnFailure 以外的重启策略
14
      containers:
15
        - name: migrate
16
          image: myapp:migrate-v1
17
          command: ["python", "migrate.py"]

1
# 定期数据库备份
2
apiVersion: batch/v1
3
kind: CronJob
4
metadata:
5
  name: db-backup
6
spec:
7
  schedule: "0 2 * * *"     # 每天凌晨 2 点
8
  concurrencyPolicy: Forbid  # 禁止并发执行
9
  successfulJobsHistoryLimit: 3
10
  failedJobsHistoryLimit: 1
11
  jobTemplate:
12
    spec:
13
      template:
14
        spec:
15
          restartPolicy: OnFailure
16
          containers:
17
            - name: backup
18
              image: myapp:backup-v1
19
              command: ["bash", "-c", "pg_dump ... | aws s3 cp - s3://backup/"]

1
myapp/
2
├── Chart.yaml          # Chart 元数据
3
├── values.yaml        # 默认配置参数
4
├── values-prod.yaml    # 生产环境覆盖
5
├── templates/         # Kubernetes 资源模板
6
│   ├── deployment.yaml
7
│   ├── service.yaml
8
│   ├── ingress.yaml
9
│   ├── _helpers.tpl   # 命名模板（可复用的模板片段）
10
│   └── NOTES.txt      # 安装后的提示信息
11
└── charts/            # 依赖的子 Chart

1
# 从 Chart 目录安装
2
helm install myapp ./myapp
3

4
# 从压缩包安装
5
helm install myapp ./myapp-1.0.0.tgz
6

7
# 从远程仓库安装
8
helm install myapp oci://registry.example.com/charts/myapp
9

10
# 指定生产环境配置
11
helm install myapp ./myapp -f values-prod.yaml
12

13
# 运行时覆盖参数
14
helm install myapp ./myapp --set replicaCount=5
15

16
# 预渲染模板（调试用）
17
helm template myapp ./myapp > rendered.yaml
18

19
# 升级已部署的 release
20
helm upgrade myapp ./myapp -f values-prod.yaml
21

22
# 安装或升级（推荐用法）
23
helm upgrade --install myapp ./myapp -f values-prod.yaml
24

25
# 回滚到上一版本
26
helm rollback myapp
27

28
# 回滚到指定版本
29
helm rollback myapp 2
30

31
# 查看已部署的 release
32
helm list
33

34
# 查看 release 的值
35
helm get values myapp

1
myapp/
2
├── base/
3
│   ├── kustomization.yaml
4
│   ├── deployment.yaml
5
│   ├── service.yaml
6
│   └── configmap.yaml
7
└── overlays/
8
    ├── dev/
9
    │   ├── kustomization.yaml
10
    │   └── patch-replicas.yaml
11
    ├── staging/
12
    │   ├── kustomization.yaml
13
    │   └── patch-replicas.yaml
14
    └── prod/
15
        ├── kustomization.yaml
16
        ├── patch-replicas.yaml
17
        └── patch-resources.yaml

1
apiVersion: kustomize.config.k8s.io/v1beta1
2
kind: Kustomization
3
resources:
4
  - deployment.yaml
5
  - service.yaml
6
  - configmap.yaml
7
namespace: myapp
8
commonLabels:
9
  app: myapp

1
# 预览开发环境配置
2
kubectl kustomize overlays/dev
3

4
# 直接部署
5
kubectl apply -k overlays/dev
6

7
# 对比不同环境的差异
8
diff <(kubectl kustomize overlays/dev) <(kubectl kustomize overlays/prod)

1
apiVersion: core.oam.dev/v1alpha2
2
kind: Application
3
metadata:
4
  name: myapp
5
spec:
6
  components:
7
    - name: web
8
      type: webservice
9
      settings:
10
        image: myapp:v1.0.0
11
        port: 8080
12
        cpu: 1
13
        memory: 1Gi
14
      traits:
15
        - name: scaler
16
          properties:
17
            replica: 3
18
        - name: ingress
19
          properties:
20
            domain: myapp.example.com
21
            path: /
22
            entrypoint: web
23
    - name: db
24
      type: webservice
25
      settings:
26
        image: postgres:15
27
        port: 5432
28
        cpu: 2
29
        memory: 4Gi
30
      traits:
31
        - name: scaler
32
          properties:
33
            replica: 1