27、Helm基础使用

[root@node1 ~]# echo "DNS1=223.5.5.5" >> /etc/sysconfig/network-scripts/ifcfg-eth0
[root@node1 ~]# systemctl restart network
[root@node1 ~]# tar xf helm-v2.15.2-linux-amd64.tar.gz
[root@node1 ~]# mv linux-amd64/helm /usr/local/bin/
[root@node1 ~]# helm version
Client: &version.Version{SemVer:"v2.15.2", GitCommit:"8dce272473e5f2a7bf58ce79bb5c3691db54c96b", GitTreeState:"clean"}
Error: could not find tiller  # 提示找不到tiller
# 自动补齐
[root@node1 ~]# helm completion bash > /usr/share/bash-completion/completions/helm
[root@node1 ~]# chmod +x /usr/share/bash-completion/completions/helm
[root@node1 ~]# source /usr/share/bash-completion/completions/helm
# 创建ServiceAccount
[root@node1 ~]# kubectl create serviceaccount tiller -n kube-system
# 创建ClusterRolebingding
[root@node1 ~]# kubectl create clusterrolebinding tiller --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
# 初始化helm
[root@node1 ~]# helm init -i registry.aliyuncs.com/google_containers/tiller:v2.15.2 --stable-repo-url http://mirror.azure.cn/kubernetes/charts/ --service-account tiller
Creating /root/.helm 
Creating /root/.helm/repository 
Creating /root/.helm/repository/cache 
Creating /root/.helm/repository/local 
Creating /root/.helm/plugins 
Creating /root/.helm/starters 
Creating /root/.helm/cache/archive 
Creating /root/.helm/repository/repositories.yaml 
Adding stable repo with URL: http://mirror.azure.cn/kubernetes/charts/ 
Adding local repo with URL: http://127.0.0.1:8879/charts 
$HELM_HOME has been configured at /root/.helm.

Tiller (the Helm server-side component) has been installed into your Kubernetes Cluster.

Please note: by default, Tiller is deployed with an insecure 'allow unauthenticated users' policy.
To prevent this, run `helm init` with the --tiller-tls-verify flag.
For more information on securing your installation see: https://docs.helm.sh/using_helm/#securing-your-helm-installation
# 更新仓库本地缓存
[root@node1 ~]# helm repo update
Hang tight while we grab the latest from your chart repositories...
...Skip local chart repository
...Successfully got an update from the "stable" chart repository
Update Complete.
# 查看指定Chart的readme，当我们查看的时候实际上我们的helm已经把这个Chart下载到本地了，存储在/root/.helm/cache/archive/
[root@node1 ~]# helm inspect readme stable/grafana
# 测试部署一个redis
[root@node1 ~]# helm install stable/redis -n redis
# 删除redis
[root@node1 ~]# helm delete redis

# 创建一个Chart
[root@node1 ~]# helm create myapp
Creating myapp
[root@node1 ~]# tree myapp/
├── charts
├── Chart.yaml
├── templates
│   ├── deployment.yaml
│   ├── _helpers.tpl
│   ├── ingress.yaml
│   ├── NOTES.txt
│   ├── serviceaccount.yaml
│   ├── service.yaml
│   └── tests
│       └── test-connection.yaml
└── values.yaml
# 修改Chart信息
[root@node1 ~]# cat myapp/Chart.yaml    
apiVersion: v1
appVersion: "1.0"
description: A Helm chart for myapp web Services
name: myapp
version: 0.1.0
# 修改基本的values.yaml的文件
[root@node1 ~]# vim myapp/values.yaml
replicaCount: 3

image:
  repository: ikubernetes/myapp
  tag: v1
  pullPolicy: IfNotPresent
# 检查语法是否有错误
[root@node1 ~]# helm lint myapp/
==> Linting myapp/
[INFO] Chart.yaml: icon is recommended

1 chart(s) linted, no failures
# 部署myapp
[root@node1 ~]# helm install -n myapp ./myapp
NAME:   myapp
LAST DEPLOYED: Thu Mar  5 17:54:04 2020
NAMESPACE: default
STATUS: DEPLOYED

RESOURCES:
==> v1/Deployment
NAME   READY  UP-TO-DATE  AVAILABLE  AGE
myapp  0/3    0           0          0s

==> v1/Pod(related)
NAME                   READY  STATUS             RESTARTS  AGE
myapp-676fd5cbc-22bzt  0/1    ContainerCreating  0         0s
myapp-676fd5cbc-gnn4v  0/1    ContainerCreating  0         0s
myapp-676fd5cbc-nfqjg  0/1    ContainerCreating  0         0s

==> v1/Service
NAME   TYPE       CLUSTER-IP   EXTERNAL-IP  PORT(S)  AGE
myapp  ClusterIP  10.99.39.74  <none>       80/TCP   0s

==> v1/ServiceAccount
NAME   SECRETS  AGE
myapp  1        0s


NOTES:
1. Get the application URL by running these commands:
  export POD_NAME=$(kubectl get pods --namespace default -l "app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp" -o jsonpath="{.items[0].metadata.name}")
  echo "Visit http://127.0.0.1:8080 to use your application"
  kubectl port-forward $POD_NAME 8080:80
# 查看创建出的资源
[root@node1 ~]# kubectl get pods,svc -l app.kubernetes.io/name=myapp
NAME                        READY   STATUS    RESTARTS   AGE
pod/myapp-676fd5cbc-82tw5   1/1     Running   0          7m44s
pod/myapp-676fd5cbc-ppt6x   1/1     Running   0          7m44s
pod/myapp-676fd5cbc-vbrvh   1/1     Running   0          7m44s

NAME            TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)   AGE
service/myapp   ClusterIP   10.109.166.136   <none>        80/TCP    7m44s
# 测试请求
[root@node1 ~]# curl 10.109.166.136
Hello MyApp | Version: v1 | <a href="hostname.html">Pod Name</a>

# 版本升级
# 修改Chart版本
[root@node1 ~]# vim myapp/Chart.yaml 
apiVersion: v1
appVersion: "1.1"
description: A Helm chart for myapp web Services
name: myapp
version: 0.1.0
# 修改镜像版本
[root@node1 ~]# vim myapp/values.yaml 
image:
  repository: ikubernetes/myapp
  tag: v2
  pullPolicy: IfNotPresent
# 升级
[root@node1 ~]# helm upgrade myapp ./myapp/
Release "myapp" has been upgraded.
...
[root@node1 ~]# curl 10.109.166.136
Hello MyApp | Version: v2 | <a href="hostname.html">Pod Name</a>  # 版本升级成功


# 回滚
[root@node1 ~]# helm rollback myapp 1
Rollback was a success.
# 回滚成功
[root@node1 ~]# curl 10.109.166.136
Hello MyApp | Version: v1 | <a href="hostname.html">Pod Name</a>
# 查看状态
[root@node1 ~]# helm status myapp 

# 打包Chart，打包完成之后会自动存放在本地仓库
[root@node1 ~]# helm package myapp/ 
Successfully packaged chart and saved it to: /root/myapp-0.1.0.tgz
# 将打包好的Chart放在指定的目录
[root@node1 ~]# mv myapp-0.1.0.tgz /data/repo/
# 启动本地仓库
[root@node1 ~]# helm serve --repo-path /data/repo/
Regenerating index. This may take a moment.
Now serving you on 127.0.0.1:8879
# 删除本地的仓库
[root@node1 ~]# helm repo remove local
"local" has been removed from your repositories
# 添加本地仓库
[root@node1 ~]# helm repo add local http://127.0.0.1:8879/
# 测试在仓库里面搜索我们的myapp
[root@node1 ~]# helm search myapp
NAME            CHART VERSION   APP VERSION     DESCRIPTION                        
local/myapp     0.1.0           1.1             A Helm chart for myapp web Services  # 测试搜索成功
# 测试安装
[root@node1 ~]# helm install -n myapp-cce-v2 local/myapp
NAME:   myapp-cce-v2
LAST DEPLOYED: Thu Mar  5 18:27:34 2020
NAMESPACE: default
STATUS: DEPLOYED

RESOURCES:
==> v1/Deployment
NAME          READY  UP-TO-DATE  AVAILABLE  AGE
myapp-cce-v2  0/3    3           0          0s

==> v1/Pod(related)
NAME                           READY  STATUS             RESTARTS  AGE
myapp-cce-v2-6fcfdfd885-2hs46  0/1    ContainerCreating  0         0s
myapp-cce-v2-6fcfdfd885-vfqjv  0/1    ContainerCreating  0         0s
myapp-cce-v2-6fcfdfd885-whsrt  0/1    ContainerCreating  0         0s

==> v1/Service
NAME          TYPE       CLUSTER-IP     EXTERNAL-IP  PORT(S)  AGE
myapp-cce-v2  ClusterIP  10.106.56.139  <none>       80/TCP   0s

==> v1/ServiceAccount
NAME          SECRETS  AGE
myapp-cce-v2  1        0s


NOTES:
1. Get the application URL by running these commands:
  export POD_NAME=$(kubectl get pods --namespace default -l "app.kubernetes.io/name=myapp,app.kubernetes.io/instance=myapp-cce-v2" -o jsonpath="{.items[0].metadata.name}")
  echo "Visit http://127.0.0.1:8080 to use your application"
  kubectl port-forward $POD_NAME 8080:80
# 查看创建出来的资源
[root@node1 ~]# kubectl get pods,svc -l app.kubernetes.io/instance=myapp-cce-v2
NAME                                READY   STATUS    RESTARTS   AGE
pod/myapp-cce-v2-6fcfdfd885-2hs46   1/1     Running   0          35s
pod/myapp-cce-v2-6fcfdfd885-vfqjv   1/1     Running   0          35s
pod/myapp-cce-v2-6fcfdfd885-whsrt   1/1     Running   0          35s

NAME                   TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)   AGE
service/myapp-cce-v2   ClusterIP   10.106.56.139   <none>        80/TCP    35s