1
apiVersion: v1
2
kind: ConfigMap
3
metadata:
4
  name: app-config
5
data:
6
  # 简单键值对
7
  LOG_LEVEL: "info"
8
  MAX_CONNECTIONS: "100"
9
  # 完整配置文件
10
  nginx.conf: |
11
    server {
12
      listen 80;
13
      location / {
14
        proxy_pass http://backend:8080;
15
      }
16
    }

1
# 从文件创建 ConfigMap
2
kubectl create configmap app-config --from-file=nginx.conf
3

4
# 从目录创建（目录中每个文件成为一个键）
5
kubectl create configmap app-config --from-file=config/
6

7
# 从字面值创建
8
kubectl create configmap app-config --from-literal=LOG_LEVEL=info

1
spec:
2
  containers:
3
    - name: my-app
4
      image: my-app:v1
5
      envFrom:                    # 引用整个 ConfigMap
6
        - configMapRef:
7
            name: app-config
8
      env:                        # 引用单个键
9
        - name: LOG_LEVEL
10
          valueFrom:
11
            configMapKeyRef:
12
              name: app-config
13
              key: LOG_LEVEL

1
spec:
2
  containers:
3
    - name: my-app
4
      image: my-app:v1
5
      volumeMounts:
6
        - name: config
7
          mountPath: /etc/nginx/nginx.conf
8
          subPath: nginx.conf      # 挂载单个键，不覆盖目录
9
  volumes:
10
    - name: config
11
      configMap:
12
        name: app-config

1
# 创建通用 Secret
2
kubectl create secret generic db-secret \
3
  --from-literal=username=admin \
4
  --from-literal=password='S3cur3P@ss!'
5

6
# 创建 TLS Secret
7
kubectl create secret tls tls-secret \
8
  --cert=cert.pem \
9
  --key=key.pem
10

11
# 创建镜像拉取 Secret
12
kubectl create secret docker-registry regcred \
13
  --docker-server=registry.example.com \
14
  --docker-username=user \
15
  --docker-password=pass

1
# Pod 引用 Secret
2
spec:
3
  containers:
4
    - name: my-app
5
      image: my-app:v1
6
      env:
7
        - name: DB_PASSWORD
8
          valueFrom:
9
            secretKeyRef:
10
              name: db-secret
11
              key: password
12
  imagePullSecrets:              # 拉取私有镜像
13
    - name: regcred

1
spec:
2
  containers:
3
    - name: app
4
      image: my-app:v1
5
      volumeMounts:
6
        - name: cache
7
          mountPath: /tmp/cache
8
        - name: config
9
          mountPath: /etc/config
10
  volumes:
11
    - name: cache
12
      emptyDir:                   # 临时目录
13
        medium: Memory            # 可选：使用内存（tmpfs）
14
        sizeLimit: 256Mi
15
    - name: config
16
      configMap:
17
        name: app-config

1
apiVersion: v1
2
kind: PersistentVolume
3
metadata:
4
  name: pv-nfs-1
5
spec:
6
  capacity:
7
    storage: 50Gi
8
  accessModes:
9
    - ReadWriteMany             # 多节点读写
10
  persistentVolumeReclaimPolicy: Retain  # 保留数据
11
  nfs:
12
    server: nfs.example.com
13
    path: /data/share1

1
apiVersion: v1
2
kind: PersistentVolumeClaim
3
metadata:
4
  name: my-data
5
spec:
6
  accessModes:
7
    - ReadWriteOnce             # 单节点读写
8
  resources:
9
    requests:
10
      storage: 10Gi
11
  storageClassName: fast        # 指定 StorageClass

1
# 扩容 PVC
2
kubectl patch pvc my-data -p '{"spec":{"resources":{"requests":{"storage":"20Gi"}}}}'
3

4
# 查看扩容状态
5
kubectl get pvc my-data
6
# NAME      STATUS   VOLUME   CAPACITY   ACCESS MODES   STORAGECLASS   AGE
7
# my-data   Bound    pv-xxx   20Gi       RWO            fast           5m