https://pothos.dpdns.org/tags/k8s/Recent content in K8s on Ralph's BlogHugo -- 0.147.7zh-cnThu, 25 Dec 2025 00:00:00 +0000https://pothos.dpdns.org/posts/9.k8s/Thu, 25 Dec 2025 00:00:00 +0000https://pothos.dpdns.org/posts/9.k8s/<h1 id="9-kubernetes-容器编排技术指南">9. Kubernetes 容器编排技术指南</h1> <h2 id="目录">目录</h2> <details> <summary>点击展开目录</summary> <p><a href="#kubernetes-%E6%A6%82%E8%BF%B0">Kubernetes 概述</a> - <a href="#%E4%BB%80%E4%B9%88%E6%98%AF-kubernetes">什么是 Kubernetes</a> - <a href="#%E6%A0%B8%E5%BF%83%E7%89%B9%E6%80%A7">核心特性</a> - <a href="#%E6%9E%B6%E6%9E%84%E8%AE%BE%E8%AE%A1">架构设计</a> - <a href="#%E4%B8%8E%E5%85%B6%E4%BB%96%E7%BC%96%E6%8E%92%E5%B7%A5%E5%85%B7%E5%AF%B9%E6%AF%94">与其他编排工具对比</a></p> <p><a href="#%E9%9B%86%E7%BE%A4%E6%9E%B6%E6%9E%84">集群架构</a> - <a href="#master-%E8%8A%82%E7%82%B9">Master 节点</a> - <a href="#worker-%E8%8A%82%E7%82%B9">Worker 节点</a> - <a href="#%E7%BD%91%E7%BB%9C%E7%BB%84%E4%BB%B6">网络组件</a> - <a href="#%E5%AD%98%E5%82%A8%E7%BB%84%E4%BB%B6">存储组件</a></p> <p><a href="#%E6%A0%B8%E5%BF%83%E5%AF%B9%E8%B1%A1">核心对象</a> - <a href="#pod-%E8%AF%A6%E8%A7%A3">Pod 详解</a> - <a href="#service-%E6%9C%8D%E5%8A%A1">Service 服务</a> - <a href="#deployment-%E9%83%A8%E7%BD%B2">Deployment 部署</a> - <a href="#configmap-%E5%92%8C-secret">ConfigMap 和 Secret</a></p> <p><a href="#%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD">工作负载</a> - <a href="#replicaset-%E5%89%AF%E6%9C%AC%E9%9B%86">ReplicaSet 副本集</a> - <a href="#daemonset-%E5%AE%88%E6%8A%A4%E8%BF%9B%E7%A8%8B">DaemonSet 守护进程</a> - <a href="#statefulset-%E6%9C%89%E7%8A%B6%E6%80%81%E5%BA%94%E7%94%A8">StatefulSet 有状态应用</a> - <a href="#job-%E5%92%8C-cronjob">Job 和 CronJob</a></p> <p><a href="#%E6%9C%8D%E5%8A%A1%E5%8F%91%E7%8E%B0%E4%B8%8E%E8%B4%9F%E8%BD%BD%E5%9D%87%E8%A1%A1">服务发现与负载均衡</a> - <a href="#service-%E7%B1%BB%E5%9E%8B">Service 类型</a> - <a href="#ingress-%E6%8E%A7%E5%88%B6%E5%99%A8">Ingress 控制器</a> - <a href="#dns-%E8%A7%A3%E6%9E%90">DNS 解析</a> - <a href="#%E8%B4%9F%E8%BD%BD%E5%9D%87%E8%A1%A1%E7%AD%96%E7%95%A5">负载均衡策略</a></p> <p><a href="#%E5%AD%98%E5%82%A8%E7%AE%A1%E7%90%86">存储管理</a> - <a href="#volume-%E5%8D%B7">Volume 卷</a> - <a href="#persistentvolume">PersistentVolume</a> - <a href="#storageclass">StorageClass</a> - <a href="#csi-%E9%A9%B1%E5%8A%A8">CSI 驱动</a></p> <p><a href="#%E9%85%8D%E7%BD%AE%E7%AE%A1%E7%90%86">配置管理</a> - <a href="#configmap-%E9%85%8D%E7%BD%AE">ConfigMap 配置</a> - <a href="#secret-%E5%AF%86%E9%92%A5">Secret 密钥</a> - <a href="#%E7%8E%AF%E5%A2%83%E5%8F%98%E9%87%8F">环境变量</a> - <a href="#%E9%85%8D%E7%BD%AE%E7%83%AD%E6%9B%B4%E6%96%B0">配置热更新</a></p> <p><a href="#%E7%BD%91%E7%BB%9C%E7%AE%A1%E7%90%86">网络管理</a> - <a href="#%E7%BD%91%E7%BB%9C%E6%A8%A1%E5%9E%8B">网络模型</a> - <a href="#cni-%E6%8F%92%E4%BB%B6">CNI 插件</a> - <a href="#networkpolicy">NetworkPolicy</a> - <a href="#service-mesh">Service Mesh</a></p> <p><a href="#%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86">安全管理</a> - <a href="#rbac-%E6%9D%83%E9%99%90%E6%8E%A7%E5%88%B6">RBAC 权限控制</a> - <a href="#pod-%E5%AE%89%E5%85%A8%E7%AD%96%E7%95%A5">Pod 安全策略</a> - <a href="#%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8">网络安全</a> - <a href="#%E9%95%9C%E5%83%8F%E5%AE%89%E5%85%A8">镜像安全</a></p>