Java连接kubernates集群最优雅的两种方式.docx

第

Java连接kubernates集群最优雅的两种方式

piler.source8/piler.source

piler.target8/piler.target

fabric.io.version6.10.0/fabric.io.version

/properties

dependencies

dependency

groupIdio.fabric8/groupId

artifactIdkubernetes-client/artifactId

version${fabric.io.version}/version

/dependency

/dependencies

目标：使用尽可能少的配置项来完成初始化工作，保证后续部署工作量最小

使用kubeconfig文件连接集群

可以获取集群的kubeconfig文件

环境变量配置

默认配置项：

KUBECONFIG=~/.kube/config

自定义配置：

KUBECONFIG=/opt/file/kubeconfig

importio.fabric8.kubernetes.api.model.Namespace;

importio.fabric8.kubernetes.api.model.NamespaceList;

importio.fabric8.kubernetes.client.KubernetesClient;

importio.fabric8.kubernetes.client.KubernetesClientBuilder;

publicclassK8sClientWithKubeConfig{

publicstaticvoidmAIn(String[]args){

KubernetesClientclient=newKubernetesClientBuilder().build();

System.out.println(client.getMasterUrl());

NamespaceListmyNs=spaces().list();

for(Namespacens:myNs.getItems()){

System.out.println(ns.getMetadata().getName());

client.close();

其中masterurl为kubeconfig文件中的server字段；

使用ServiceAccount连接集群

应用部署在k8s集群内，且可以创建ServiceAccount和进行授权等操作（RBAC）

apiVersion:v1

kind:ServiceAccount

metadata:

name:fmuser

apiVersion:rbac.authorization.k8s.io/v1

kind:ClusterRole

metadata:

name:fmuser-role

rules:

-apiGroups:[]

resources:[pods,namespaces]

verbs:[get,list,watch]

-apiGroups:[]

resources:[pods/log]

verbs:[get,list,watch]

-apiGroups:[]

resources:[pods]

verbs:[delete]

-apiGroups:[]

resources:[namespaces]

verbs:[get,list,watch]

apiVersion:rbac.authorization.k8s.io/v1

kind:ClusterRoleBinding

metadata:

name:fmuser-rolebinding

subjects:

-kind:ServiceAccount

name:fmuser

namespace:default

roleRef:

kind:ClusterRole

name:fmuser-role

apiGroup:rbac.authorization.k8s.io

资源授权根据实际使用情况设置即可，Role