通过这篇文档：https://kubesphere.com.cn/forum/d/1745-kubesphere-v3-0-0-dev-on-ack
- 其中使用OSS对象存储，非动态存储；
- ks-apiserver 修复：使用command: [ “/bin/sh”, “-ce”, “tail -f /dev/null”]才能正常；
- 目前还剩下openldap-0无法成功，报错是探针失败Liveness probe failed: dial tcp 172.20.0.252:389: connect: connection refused，不清楚为什么，论坛找了一圈都没有这个问题？用的是阿里1.18系统版本。
以下是这个的配置：
spec:
podManagementPolicy: OrderedReady
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
app.kubernetes.io/instance: ks-openldap
app.kubernetes.io/name: openldap-ha
serviceName: openldap
template:
metadata:
labels:
app.kubernetes.io/instance: ks-openldap
app.kubernetes.io/name: openldap-ha
spec:
affinity:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- preference:
matchExpressions:
- key: node-role.kubernetes.io/master
operator: In
values:
- ''
weight: 100
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
app.kubernetes.io/instance: ks-openldap
app.kubernetes.io/name: openldap-ha
topologyKey: kubernetes.io/hostname
containers:
- command:
- /bin/sh
- ‘-ce’
- tail -f /dev/null
env:
- name: LDAP_ORGANISATION
value: kubesphere
- name: LDAP_DOMAIN
value: kubesphere.io
- name: LDAP_CONFIG_PASSWORD
value: admin
- name: LDAP_ADMIN_PASSWORD
value: admin
- name: LDAP_REPLICATION
value: ‘false’
- name: LDAP_TLS
value: ‘false’
- name: LDAP_REMOVE_CONFIG_AFTER_SETUP
value: ‘true’
- name: MY_POD_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: HOSTNAME
value: $(MY_POD_NAME).openldap
image: ‘osixia/openldap:1.3.0’
imagePullPolicy: IfNotPresent
lifecycle: {}
livenessProbe:
failureThreshold: 3
initialDelaySeconds: 15
periodSeconds: 10
successThreshold: 1
tcpSocket:
port: 389
timeoutSeconds: 1
name: openldap-ha
ports:
- containerPort: 389
name: ldap
protocol: TCP
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 15
periodSeconds: 10
successThreshold: 1
tcpSocket:
port: 389
timeoutSeconds: 1
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/lib/ldap
name: volume-openldap-pvc-openldap-0
- mountPath: /etc/ldap/slapd.d
name: volume-openldap-pvc-openldap-0
dnsConfig: {}
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext:
seLinuxOptions: {}
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoSchedule
key: node-role.kubernetes.io/master
- key: CriticalAddonsOnly
operator: Exists
volumes:
- name: volume-openldap-pvc-openldap-0
persistentVolumeClaim:
claimName: openldap-pvc-openldap-0
updateStrategy:
rollingUpdate:
partition: 0
type: RollingUpdate
volumeClaimTemplates:
- apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: openldap-pvc
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 20Gi
volumeMode: Filesystem
status:
phase: Pending
status:
collisionCount: 0
currentReplicas: 1
currentRevision: openldap-55cb7fb655
observedGeneration: 48
replicas: 1
updateRevision: openldap-55cb7fb655
updatedReplicas: 1
