sleep 3600'] imagePullPolicy: IfNotPresent --- apiVersion: v1 kind: Pod metadata: name: busybox -2 namespace: network-policy-2 labels: name: busybox-2 spec: containers: - name busybox-2 1/1 Running 0 23s 10.244.139.253 k8s-calico-node02 <none> -2无法访问busybox-1 ❯ kubectl exec -n network-policy-2 busybox-2 -- ping 10.244.195.91 ^C 默认允许所有入口流量 在前面那条 -2重新可以访问busybox-1了 ❯ kubectl exec -n network-policy-2 busybox-2 -- ping 10.244.195.91 PING 10.244.195.91
apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox 1/1 Running 0 9m35s [root@VM_1_6_centos ~]# k exec busybox2 -- hostname busybox
- apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox name 为 busybox1,hostname 为 busybox-1,subdomain 为 default-subdomain 的 Pod; name 为 busybox2,hostname 为 busybox
liruilongs.github.io]-[~/ansible/k8s-hello-mutating-webhook/k8s-hello-mutating-webhook/k8s/csr] └─$kubectl run busybox -2 --image=busybox --restart=Never -l=app=busybox -- sleep 3600 pod/busybox-2 created ┌──[root@vms100 READY STATUS RESTARTS AGE HELLO-ADDED busybox-1 1/1 Running 0 30m OK busybox liruilongs.github.io]-[~/ansible/k8s-hello-mutating-webhook/k8s-hello-mutating-webhook/k8s/csr] └─$kubectl exec busybox
--apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox
:16:3e:d9:a0:5e 00:23:89:8C:E8:31 busybox-1 192.168.187.211 3a:1d:1e:91:f5:9e 66:39:fa:e7:9f:a9 busybox
- apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox
比如,指定 hostname 为 busybox-2 和 subdomain 为 default-subdomain,完整域名为 busybox-2.default-subdomain.default.svc.cluster.local apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox
apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox
下面分别简单演示与宿主机或者其它容器共享目录; (1) 宿主机共享 ctr -n k8s.io c create docker.io/library/busybox:latest busybox-2 - -mount type=bind,src=/tmp,dst=/host,options=rbind:rw ctr -n k8s.io t start -d busybox-2 sh ctr -n k8s.io t exec -t --exec-id $RANDOM busybox-2 sh # / # echo "WeiyiGeek" > /host/name # / # root@containerd # busybox 43908 RUNNING # busybox-1 48850 RUNNING # 这里的48850即为已有task运行时的pid号 # busybox
下面分别简单演示与宿主机或者其它容器共享目录; (1) 宿主机共享 ctr -n k8s.io c create docker.io/library/busybox:latest busybox-2 - -mount type=bind,src=/tmp,dst=/host,options=rbind:rw ctr -n k8s.io t start -d busybox-2 sh ctr -n k8s.io t exec -t --exec-id $RANDOM busybox-2 sh # / # echo "WeiyiGeek" > /host/name # / # root@containerd # busybox 43908 RUNNING # busybox-1 48850 RUNNING # 这里的48850即为已有task运行时的pid号 # busybox
- apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox
apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox
apiVersion: v1 kind: Pod metadata: name: busybox2 labels: name: busybox spec: hostname: busybox
GATES busybox-1 1/1 Running 0 2m26s 10.244.1.22 k8s02 <none> <none> busybox