Simple Blog

1
静态供给：
2
管理员手动创建PV → 用户创建PVC → 自动绑定
3

4
动态供给：
5
用户创建PVC（指定StorageClass）→ 自动创建PV → 自动绑定

1
apiVersion: v1
2
kind: Pod
3
metadata:
4
  name: emptydir-demo
5
spec:
6
  containers:
7
  - name: writer
8
    image: busybox
9
    command: ['sh', '-c', 'echo "Hello" > /data/msg.txt; sleep 3600']
10
    volumeMounts:
11
    - name: shared-data
12
      mountPath: /data
13

14
  - name: reader
15
    image: busybox
16
    command: ['sh', '-c', 'while true; do cat /data/msg.txt 2>/dev/null; sleep 5; done']
17
    volumeMounts:
18
    - name: shared-data
19
      mountPath: /data
20

21
  volumes:
22
  - name: shared-data
23
    emptyDir: {}      # 使用磁盘
24
    # emptyDir:
25
    #   medium: Memory  # 使用内存（更快）

1
apiVersion: v1
2
kind: Pod
3
metadata:
4
  name: hostpath-demo
5
spec:
6
  containers:
7
  - name: nginx
8
    image: nginx:1.20
9
    volumeMounts:
10
    - name: host-data
11
      mountPath: /usr/share/nginx/html
12

13
  volumes:
14
  - name: host-data
15
    hostPath:
16
      path: /data/nginx
17
      type: DirectoryOrCreate

1
Available（可用）→ Bound（已绑定）→ Released（已释放）→ Failed（失败）

1
apiVersion: v1
2
kind: PersistentVolume
3
metadata:
4
  name: pv-nfs-001
5
spec:
6
  capacity:
7
    storage: 10Gi
8

9
  accessModes:
10
  - ReadWriteOnce
11

12
  persistentVolumeReclaimPolicy: Retain
13

14
  storageClassName: nfs-storage
15

16
  nfs:
17
    server: 192.168.100.14
18
    path: /data/nfs/pv-001

1
apiVersion: v1
2
kind: PersistentVolumeClaim
3
metadata:
4
  name: mysql-pvc
5
  namespace: default
6
spec:
7
  accessModes:
8
  - ReadWriteOnce
9

10
  resources:
11
    requests:
12
      storage: 10Gi
13

14
  storageClassName: nfs-storage

1
匹配条件（全部满足）：
2
1. accessModes 匹配
3
2. storage大小满足（PV >= PVC）
4
3. storageClassName 匹配
5

6
优先级：
7
1. 大小精确匹配
8
2. 最小满足（PV略大于PVC）

1
apiVersion: v1
2
kind: Pod
3
metadata:
4
  name: mysql-pod
5
spec:
6
  containers:
7
  - name: mysql
8
    image: mysql:8.0
9
    volumeMounts:
10
    - name: mysql-data
11
      mountPath: /var/lib/mysql
12

13
  volumes:
14
  - name: mysql-data
15
    persistentVolumeClaim:
16
      claimName: mysql-pvc

1
apiVersion: storage.k8s.io/v1
2
kind: StorageClass
3
metadata:
4
  name: nfs-storage
5
provisioner: nfs-provisioner
6
parameters:
7
  archiveOnDelete: "false"
8
reclaimPolicy: Delete
9
volumeBindingMode: Immediate

1
apiVersion: storage.k8s.io/v1
2
kind: StorageClass
3
metadata:
4
  name: nfs-storage
5
  annotations:
6
    storageclass.kubernetes.io/is-default-class: "true"
7
provisioner: nfs-provisioner

1
优点：
2
✅ 简单直接，无需额外配置
3
✅ 性能最好（本地磁盘）
4
✅ 零成本
5

6
缺点：
7
❌ 数据绑定节点，Pod漂移会丢失数据
8
❌ 无法多节点共享
9
❌ 安全风险高
10

11
适用场景：
12
- 开发测试
13
- 单节点集群
14
- DaemonSet日志收集

1
优点：
2
✅ 支持RWX多节点读写
3
✅ 配置简单
4
✅ 成本低
5

6
缺点：
7
❌ 性能一般（网络IO）
8
❌ 单点故障风险（NFS Server挂了全挂）
9
❌ 不适合高并发
10

11
适用场景：
12
- 开发环境
13
- 小规模生产（非核心业务）
14
- 共享配置文件

1
优点：
2
✅ 高可用（数据多副本）
3
✅ 可扩展（横向扩展）
4
✅ 性能好
5
✅ 支持RWX
6

7
缺点：
8
❌ 部署复杂
9
❌ 需要专业运维
10
❌ 资源消耗大（至少3节点）
11

12
适用场景：
13
- 企业级生产环境
14
- 大规模集群
15
- 对数据可靠性要求高

1
优点：
2
✅ 高可用（云厂商保障）
3
✅ 易用（云平台集成）
4
✅ 性能可选（SSD/HDD）
5
✅ 快照备份方便
6

7
缺点：
8
❌ 只支持RWO
9
❌ 成本较高
10
❌ 绑定云厂商
11

12
适用场景：
13
- 云环境生产
14
- 数据库存储
15
- 单实例应用

1
优点：
2
✅ 无限容量
3
✅ 高可用
4
✅ 成本低（按量付费）
5

6
缺点：
7
❌ 不支持POSIX文件系统
8
❌ 只适合读多写少场景
9

10
适用场景：
11
- 静态资源（图片、视频）
12
- 备份归档
13
- 大数据存储

1
1. 能用云存储就用云存储（省心）
2
2. 自建存储需要专业运维团队
3
3. 数据库等核心应用使用高可用存储
4
4. 定期备份，备份，备份！

1
apiVersion: v1
2
kind: Pod
3
metadata:
4
  name: nginx-hostpath
5
  labels:
6
    app: nginx
7
spec:
8
  # 指定调度到node1（hostPath绑定节点）
9
  nodeSelector:
10
    kubernetes.io/hostname: k8s-node1
11

12
  containers:
13
  - name: nginx
14
    image: nginx:1.20
15
    ports:
16
    - containerPort: 80
17
    volumeMounts:
18
    - name: html-data
19
      mountPath: /usr/share/nginx/html
20

21
  volumes:
22
  - name: html-data
23
    hostPath:
24
      path: /data/nginx-html
25
      type: Directory
26
---
27
apiVersion: v1
28
kind: Service
29
metadata:
30
  name: nginx-hostpath
31
spec:
32
  selector:
33
    app: nginx
34
  ports:
35
  - port: 80
36
    nodePort: 30090
37
  type: NodePort

1
# RBAC权限
2
apiVersion: v1
3
kind: ServiceAccount
4
metadata:
5
  name: nfs-provisioner
6
  namespace: kube-system
7
---
8
apiVersion: rbac.authorization.k8s.io/v1
9
kind: ClusterRole
10
metadata:
11
  name: nfs-provisioner
12
rules:
13
- apiGroups: [""]
14
  resources: ["persistentvolumes"]
15
  verbs: ["get", "list", "watch", "create", "delete"]
16
- apiGroups: [""]
17
  resources: ["persistentvolumeclaims"]
18
  verbs: ["get", "list", "watch", "update"]
19
- apiGroups: ["storage.k8s.io"]
20
  resources: ["storageclasses"]
21
  verbs: ["get", "list", "watch"]
22
- apiGroups: [""]
23
  resources: ["events"]
24
  verbs: ["create", "update", "patch"]
25
---
26
apiVersion: rbac.authorization.k8s.io/v1
27
kind: ClusterRoleBinding
28
metadata:
29
  name: nfs-provisioner
30
roleRef:
31
  apiGroup: rbac.authorization.k8s.io
32
  kind: ClusterRole
33
  name: nfs-provisioner
34
subjects:
35
- kind: ServiceAccount
36
  name: nfs-provisioner
37
  namespace: kube-system
38
---
39
# Deployment
40
apiVersion: apps/v1
41
kind: Deployment
42
metadata:
43
  name: nfs-provisioner
44
  namespace: kube-system
45
spec:
46
  replicas: 1
47
  selector:
48
    matchLabels:
49
      app: nfs-provisioner
50
  template:
51
    metadata:
52
      labels:
53
        app: nfs-provisioner
54
    spec:
55
      serviceAccountName: nfs-provisioner
56
      containers:
57
      - name: nfs-provisioner
58
        image: registry.cn-hangzhou.aliyuncs.com/open-ali/nfs-client-provisioner:latest
59
        volumeMounts:
60
        - name: nfs-client-root
61
          mountPath: /persistentvolumes
62
        env:
63
        - name: PROVISIONER_NAME
64
          value: nfs-provisioner        # Provisioner名称
65
        - name: NFS_SERVER
66
          value: 192.168.100.14         # NFS服务器地址
67
        - name: NFS_PATH
68
          value: /data/nfs-storage      # NFS共享路径
69
      volumes:
70
      - name: nfs-client-root
71
        nfs:
72
          server: 192.168.100.14
73
          path: /data/nfs-storage
74
---
75
# StorageClass
76
apiVersion: storage.k8s.io/v1
77
kind: StorageClass
78
metadata:
79
  name: nfs-storage
80
  annotations:
81
    storageclass.kubernetes.io/is-default-class: "true"  # 设为默认
82
provisioner: nfs-provisioner
83
parameters:
84
  archiveOnDelete: "false"    # 删除PVC时不归档数据
85
reclaimPolicy: Delete
86
volumeBindingMode: Immediate

1
apiVersion: v1
2
kind: PersistentVolumeClaim
3
metadata:
4
  name: test-pvc
5
spec:
6
  accessModes:
7
  - ReadWriteMany
8
  resources:
9
    requests:
10
      storage: 1Gi
11
  storageClassName: nfs-storage

1
apiVersion: v1
2
kind: Pod
3
metadata:
4
  name: test-nfs-pod
5
spec:
6
  containers:
7
  - name: app
8
    image: nginx:1.20
9
    volumeMounts:
10
    - name: data
11
      mountPath: /usr/share/nginx/html
12
  volumes:
13
  - name: data
14
    persistentVolumeClaim:
15
      claimName: test-pvc

1
apiVersion: v1
2
kind: Service
3
metadata:
4
  name: mysql-headless
5
spec:
6
  clusterIP: None  # Headless Service
7
  selector:
8
    app: mysql
9
  ports:
10
  - port: 3306
11
---
12
apiVersion: apps/v1
13
kind: StatefulSet
14
metadata:
15
  name: mysql
16
spec:
17
  serviceName: mysql-headless
18
  replicas: 3
19
  selector:
20
    matchLabels:
21
      app: mysql
22
  template:
23
    metadata:
24
      labels:
25
        app: mysql
26
    spec:
27
      containers:
28
      - name: mysql
29
        image: mysql:8.0
30
        ports:
31
        - containerPort: 3306
32
        env:
33
        - name: MYSQL_ROOT_PASSWORD
34
          value: "MyPass123"
35
        volumeMounts:
36
        - name: data
37
          mountPath: /var/lib/mysql
38

39
  # VolumeClaimTemplate（每个Pod独立PVC）
40
  volumeClaimTemplates:
41
  - metadata:
42
      name: data
43
    spec:
44
      accessModes: ["ReadWriteOnce"]
45
      storageClassName: nfs-storage
46
      resources:
47
        requests:
48
          storage: 5Gi