{"id":10007050,"date":"2023-01-09T18:12:43","date_gmt":"2023-01-09T10:12:43","guid":{"rendered":"https:\/\/ityet.com\/?p=10007050"},"modified":"2023-01-09T18:12:43","modified_gmt":"2023-01-09T10:12:43","slug":"k8s-%e7%94%9f%e6%80%81%e5%91%a8%e6%8a%a5-containerd-%e5%ad%98%e5%9c%a8-bug-%e4%bc%9a%e5%af%bc%e8%87%b4-pod-%e8%a2%ab%e9%87%8d%e5%90%af%ef%bc%8c%e5%bb%ba%e8%ae%ae%e5%8d%87%e7%ba%a7","status":"publish","type":"post","link":"https:\/\/itmax.cn\/?p=10007050","title":{"rendered":"K8S \u751f\u6001\u5468\u62a5| containerd \u5b58\u5728 bug \u4f1a\u5bfc\u81f4 Pod \u88ab\u91cd\u542f\uff0c\u5efa\u8bae\u5347\u7ea7"},"content":{"rendered":"

\u300cK8S \u751f\u6001\u5468\u62a5\u300d\u5185\u5bb9\u4e3b\u8981\u5305\u542b\u6211\u6240\u63a5\u89e6\u5230\u7684 K8S \u751f\u6001\u76f8\u5173\u7684\u6bcf\u5468\u503c\u5f97\u63a8\u8350\u7684\u4e00\u4e9b\u4fe1\u606f\u3002\u6b22\u8fce\u8ba2\u9605\u77e5\u4e4e\u4e13\u680f\u300ck8s\u751f\u6001\u300d<\/a>\u3002<\/p><\/blockquote>\n

\u5927\u5bb6\u597d\uff0c\u6211\u662f\u5f20\u664b\u6d9b\u3002<\/p>\n

\u8fd9\u662f 2023 \u5e74\u7684\u7b2c\u4e00\u7bc7\u300eK8S \u751f\u6001\u5468\u62a5\u300f\uff0c\u5728\u4e0a\u4e2a\u6708\u7684\u6708\u4e2d\u4e4b\u540e\u6211\u56e0\u4e3a\u9633\u4e86\u5c31\u505c\u6b62\u66f4\u65b0\u4e86\uff0c\u4e00\u76f4\u5728\u4fee\u517b\u8eab\u4f53\u3002\u751f\u75c5\u76f8\u5173\u7684\u5185\u5bb9\u6211\u5728\u4e0a\u4e00\u7bc7\u6587\u7ae0 \u5f20\u664b\u6d9b\uff1a\u6211\u7684 2022 \u603b\u7ed3 | MoeLove<\/a>\u6709\u505a\u4ecb\u7ecd\u3002\u613f\u5927\u5bb6\u90fd\u6ce8\u610f\u8eab\u4f53\uff0c\u4fdd\u6301\u5065\u5eb7\u3002<\/p>\n

\u8fd9\u7bc7\u4e2d\u7684\u5185\u5bb9\u540c\u6837\u4e5f\u5305\u542b\u4e86\u8fd1\u4e00\u4e2a\u6708\u4e2d\u503c\u5f97\u5173\u6ce8\u7684\u5185\u5bb9\u3002<\/p>\n

containerd v1.6.15 \u53d1\u5e03<\/h2>\n

\u5c3d\u7ba1 containerd \u7684 1.7.0-beta.2 \u4e5f\u5df2\u7ecf\u4e8e\u8fd1\u671f\u53d1\u5e03\uff0c\u4f46\u6b63\u5f0f\u7248\u53d1\u5e03\u8fd8\u9700\u8981\u4e00\u6bb5\u65f6\u95f4\u3002\u73b0\u5728 containerd \u4f7f\u7528\u6700\u591a\u7684\u8fd8\u662f v1.6 \u548c v1.5 \u8fd9\u4e24\u4e2a\u4e3b\u8981\u7248\u672c\uff0c
\u8fd9\u6b21\u53d1\u5e03\u7684 v1.6.15 \u4e2d\u6709\u4e00\u4e2a\u975e\u5e38\u5173\u952e\u7684\u53d8\u66f4\uff0c\u662f #7845 – CRI: Fix no CNI info for pod sandbox on restart by dcantah<\/a><\/p>\n

\u6211\u4e3b\u8981\u4e5f\u662f\u60f3\u804a\u4e00\u4e0b\u8fd9\u4e2a\uff0c\u4ece v1.6.9 \u5f00\u59cb\u7684\u6700\u8fd1\u51e0\u4e2a containerd \u7248\u672c\u4e2d\u90fd\u53d7\u5230\u4e86\u6b64\u95ee\u9898\u5f71\u54cd\u3002<\/p>\n

\u7b80\u5355\u6765\u8bf4\u5c31\u662f containerd \u91cd\u542f\u540e\uff0cSandbox IP \u6ca1\u80fd\u4fdd\u7559\uff0c\u6700\u7ec8\u5bfc\u81f4 kubelet \u5c06\u4f1a\u91cd\u542f Pod \uff08\u5982\u679c\u91cd\u542f kubelet\uff09\u3002<\/p>\n

\u5177\u4f53\u73b0\u8c61\u5982\u4e0b\uff0c\u5728 Node \u4e0a\u901a\u8fc7 crictl \u5de5\u5177\u67e5\u770b\u4efb\u610f\u672a\u4f7f\u7528 HostNetwork \u7684 Pod \u7684 .status.network<\/code> \u5b57\u6bb5\uff0c\u53ef\u4ee5\u770b\u5230\u5982\u4e0b\u7ed3\u679c\uff1a<\/p>\n

(MoeLove) \u279c crictl -r unix:\/\/\/run\/containerd\/containerd.sock  inspectp e03077da768e6  | jq .status.network\n{\n  "additionalIps": [],\n  "ip": "10.244.1.5"<\/code><\/pre>\n
\u5728\u91cd\u542f containerd \u540e\uff0c\u518d\u6b21\u91cd\u590d\u64cd\u4f5c\uff0c\u5c31\u4f1a\u53d1\u73b0 .status.network.ip<\/code> \u5b57\u6bb5\u4e3a\u7a7a\u4e86\uff1a<\/p>\n
(MoeLove) \u279c crictl -r unix:\/\/\/run\/containerd\/containerd.sock  inspectp e03077da768e6  | jq .status.network\n{\n  "additionalIps": [],\n  "ip": ""<\/code><\/pre>\n
\u4e0d\u8fc7\u6b21\u662f\u5982\u679c\u5728 Kubernetes \u96c6\u7fa4\u4e2d\u901a\u8fc7 kubectl \u67e5\u770b\u8be5 Pod \u7684\u72b6\u6001\uff0c\u4f1a\u53d1\u73b0 Pod \u7684 IP \u8fd8\u5728\u3002<\/p>\n
(MoeLove) \u279c kubectl get pods moelove-test-pods -o json | jq .status.podIPs\n[\n  {\n    "ip": "10.244.1.5"\n  }\n]<\/code><\/pre>\n
\u4f46\u5982\u679c\u5728 Node \u4e0a\u91cd\u542f kubelet\uff0c\u518d\u6b21\u67e5\u770b Pod \u7684\u72b6\u6001\uff0c\u5219\u4f1a\u53d1\u73b0\u5b83\u7684 IP \u53d1\u751f\u4e86\u53d8\u5316\uff0c\u5e76\u4e14\u8fd8\u91cd\u542f\u4e86\u3002<\/p>\n
(MoeLove) \u279c kubectl get pods moelove-test-pods -o json | jq '{podIPs: .status.podIPs, restartCount: .status.containerStatuses[].restartCount}'\n{\n  "podIPs": [\n    {\n      "ip": "10.244.1.8"\n    }\n  ],\n  "restartCount": 1\n}<\/code><\/pre>\n
\u5728\u751f\u4ea7\u73af\u5883\u4e2d\uff0c\u6bd4\u5982\u8981\u8fdb\u884c\u7248\u672c\u5347\u7ea7\uff0c\u6216\u8005\u4e00\u4e9b\u7ef4\u62a4\u64cd\u4f5c\uff0ckubelet \u53d1\u751f\u91cd\u542f\u662f\u4e00\u4ef6\u5e38\u89c4\u7684\u4e8b\u60c5\u3002
\u4f46\u4e0a\u8ff0\u8fd9\u79cd\u60c5\u51b5\uff0c \u5728\u5927\u591a\u6570\u751f\u4ea7\u73af\u5883\u90fd\u662f\u4e0d\u80fd\u63a5\u53d7\u7684\u3002<\/strong> \u8fd9\u5c06\u4f1a\u5bfc\u81f4 Node \u4e0a\u7684 Pod \u90fd\u53d1\u751f\u91cd\u542f\uff0c\u8fdb\u800c\u53ef\u80fd\u4f1a\u5f71\u54cd\u5230\u4e1a\u52a1\u7684\u7a33\u5b9a\u6027\u3002<\/p>\n
\u73b0\u5728 containerd \u4e0a\u6e38\u5df2\u7ecf\u8fdb\u884c\u4e86\u4fee\u590d\uff0c\u4e5f cherry-pick \u5230\u4e86 v1.6.15 \u4e2d\u3002
\u6240\u4ee5\uff0c\u5982\u679c\u60f3\u8981\u907f\u514d\u6216\u8005\u4fee\u6b63\u6b64\u95ee\u9898\uff0c
\u53ef\u4ee5\u4f7f\u7528\u4f4e\u4e8e containerd v1.6.9 \u7684\u7248\u672c\uff0c\u6216\u8005\u76f4\u63a5\u66f4\u65b0\u5230 v1.6.15<\/strong>\u3002<\/p>\n
\u66f4\u591a\u5173\u4e8e containerd \u65b0\u7248\u672c\u7684\u53d8\u66f4\uff0c\u8bf7\u53c2\u8003\u5176 ReleaseNote<\/a><\/p>\n
Apache APISIX Ingress v1.6 \u53d1\u5e03<\/h2>\n
\u8ddd\u79bb\u4e0a\u4e00\u4e2a\u7248\u672c v1.5 \u53d1\u5e03\uff0c\u5df2\u7ecf\u8fc7\u4e86 3 \u4e2a\u6708\uff0cApache APISIX Ingress v1.6 \u7ec8\u4e8e\u6b63\u5f0f\u53d1\u5e03\uff01<\/p>\n
\u5728\u8fd9\u4e2a\u7248\u672c\u4e2d\uff0c\u5171\u6709 29 \u4f4d\u8d21\u732e\u8005<\/strong>\u53c2\u4e0e\u4ee3\u7801\u63d0\u4ea4\uff0c\u5176\u4e2d 17 \u4f4d\u662f\u65b0\u589e\u8d21\u732e\u8005<\/strong>\uff0c\u611f\u8c22\u5927\u5bb6\u7684\u652f\u6301\u548c\u53c2\u4e0e\uff01<\/p>\n
\"img\"<\/p>\n
\u672c\u6b21\u53d1\u5e03\u7684 Apache APISIX Ingress v1.6 \u7248\u672c\u5e26\u6765\u4e86\u4f17\u591a\u65b0\u7279\u6027\uff0c\u4e3b\u8981\u96c6\u4e2d\u5728\u5bf9 Gateway API \u7684\u652f\u6301\uff0c\u6269\u5c55 APISIX Ingress \u7684\u4f7f\u7528\u573a\u666f\uff0c\u548c\u4e00\u4e9b\u6613\u7528\u6027\u65b9\u9762\u7684\u63d0\u5347\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u91cd\u70b9\u7279\u6027\u7684\u4ecb\u7ecd\u3002<\/p>\n
\u6269\u5c55\u5bf9 Gateway API \u7684\u652f\u6301<\/h3>\n
Gateway API \u662f Kubernetes \u4e2d\u4e0b\u4e00\u4ee3\u7684 Ingress \u89c4\u8303\uff0c\u81f4\u529b\u4e8e\u63d0\u4f9b\u5bcc\u6709\u8868\u73b0\u529b\uff0c\u53ef\u6269\u5c55\u548c\u9762\u5411\u89d2\u8272\u7684\u63a5\u53e3\u6765\u53d1\u5c55 Kubernetes \u7684\u7f51\u7edc\uff0c\u5404\u4e2a Ingress controller \u9879\u76ee\u90fd\u5728\u79ef\u6781\u63a8\u8fdb\u5bf9\u8be5\u89c4\u8303\u7684\u652f\u6301\u3002Apache APISIX Ingress \u9879\u76ee\u81ea 2021 \u5e74\u5f00\u59cb\u5c31\u5728\u79ef\u6781\u7684\u7d27\u8ddf\u4e0a\u6e38\u793e\u533a\u7684\u53d1\u5c55\uff0c\u5e76\u79ef\u6781\u63a8\u8fdb Gateway API \u5728 APISIX Ingress \u9879\u76ee\u4e2d\u7684\u5b9e\u73b0\u3002<\/p>\n
\"img\"<\/p>\n
\u5f53\u524d\uff0cApache APISIX Ingress \u9879\u76ee\u4e2d\u901a\u8fc7 Gateway API \u8fdb\u884c\u914d\u7f6e\u7684\u7279\u6027\u5c1a\u5904\u4e8e beta \u9636\u6bb5\uff0c\u6b22\u8fce\u5927\u5bb6\u5728\u6d4b\u8bd5\u73af\u5883\u4e2d\u79ef\u6781\u8fdb\u884c\u6d4b\u8bd5\uff0c\u5e76\u63d0\u4f9b\u53cd\u9988\uff0c\u6211\u4eec\u5c06\u6301\u7eed\u7684\u5bf9\u6b64\u7279\u6027\u8fdb\u884c\u4f18\u5316\u548c\u6539\u8fdb\uff0c\u5c3d\u65e9\u5b8c\u6210\u6b64\u7279\u6027\u7684 GA\u3002<\/p>\n
\u5728 APISIX Ingress v1.6 \u7248\u672c\u4e2d\uff0c\u6211\u4eec\u6dfb\u52a0\u4e86\u5bf9 Gateway API \u4e2d\u7684 TCPRoute<\/code> \u548c UDPRoute<\/code> \u8fd9\u4e24\u79cd\u8d44\u6e90\u7684\u652f\u6301\uff0c\u540c\u65f6\uff0c\u6269\u5c55\u4e86\u5bf9 HTTPRoute<\/code> \u8d44\u6e90\u4e2d Filters<\/code> \u7684\u652f\u6301\uff0c\u8fd9\u6837\u7528\u6237\u5728\u4f7f\u7528 HTTPRoute<\/code> \u8d44\u6e90\u7684\u65f6\u5019\uff0c\u5c31\u53ef\u4ee5\u5728\u8be5\u8d44\u6e90\u4e2d\u5e94\u7528\u4e00\u4e9b\u91cd\u5b9a\u5411\uff0cHeader \u6539\u5199\u7b49\u80fd\u529b\u4e86\u3002<\/p>\n
\u4f8b\u5982\u53ef\u4ee5\u4f7f\u7528\u5982\u4e0b\u914d\u7f6e\uff1a<\/p>\n
apiVersion: gateway.networking.k8s.io\/v1alpha2\nkind: HTTPRoute\nmetadata:\n  name: http-route\nspec:\n  hostnames: ["httpbin.org"]\n  rules:\n  - matches:\n    - path:\n        type: PathPrefix\n        value: \/headers\n    filters:\n    - type: RequestHeaderModifier\n      requestHeaderModifier:\n        add:\n        - name: X-Api-Version\n          value: v1\n        - name: X-api-key\n          value: api-value\n        set:\n        - name: X-Auth\n          value: filter\n        remove:\n        - Remove-header\n    backendRefs:\n    - name: httpbin\n      port: 80<\/code><\/pre>\n
\u901a\u8fc7\u4f7f\u7528\u6b64\u914d\u7f6e\uff0cclient \u5728\u5bf9 httpbin.org<\/code> \u8fdb\u884c\u8bf7\u6c42\u65f6\uff0c\u5c06\u4f1a\u6dfb\u52a0 "X-Api-Version": "v1"<\/code> \u548c "X-Api-Key": "api-value"<\/code> \u7684\u8bf7\u6c42\u5934\uff0c\u5e76\u5c06 "X-Auth"<\/code> \u8bf7\u6c42\u5934\u7684\u503c\u8bbe\u7f6e\u4e3a filter<\/code> \uff0c\u540c\u65f6\u5c06\u79fb\u9664 "Remove-Header"<\/code> \u8fd9\u4e2a\u8bf7\u6c42\u5934 \u3002<\/p>\n
\u53e6\u5916\u5c31\u662f\u5728\u8fd9\u4e2a\u7248\u672c\u4e2d\uff0c\u589e\u52a0\u4e86\u5bf9\u5916\u90e8\u670d\u52a1\u7684\u4ee3\u7406\u4ee5\u53ca ExternalName Service \u652f\u6301\uff1b\u8fd8\u6709\u652f\u6301\u548c\u5916\u90e8\u670d\u52a1\u6ce8\u518c\u53d1\u73b0\u7ec4\u4ef6\u7684\u96c6\u6210\uff0c\u6bd4\u5982 Consul, Nacos\uff0cEureka, DNS \u7b49\uff0c
\u800c \u8fd9\u4e9b\u529f\u80fd\u5728\u5f88\u591a Ingress controller \u4e2d\u662f\u4e0d\u5177\u5907\u7684<\/strong> \u3002<\/p>\n
\u6b64\u5916\uff0c\u6211\u4eec\u4e5f\u79ef\u6781\u7684\u548c\u4f17\u591a\u5f00\u6e90\u9879\u76ee\u8fdb\u884c\u4e86\u534f\u4f5c\uff0c\u6bd4\u5982\u53ef\u4ee5\u548c Flagger \u4ee5\u53ca Argo \u7b49 GitOps \u9886\u57df\u7684\u4e3b\u6d41\u9879\u76ee\u96c6\u6210\u3002\u5173\u4e8e Flagger \u548c Argo \u7b49\u76f8\u5173\u9879\u76ee\u7684\u4f7f\u7528\uff0c\u53ef\u4ee5\u67e5\u770b\u6211\u4e4b\u524d\u5199\u7684\u6587\u7ae0\u3002<\/p>\n
\u6b22\u8fce\u611f\u5174\u8da3\u7684\u5c0f\u4f19\u4f34\u67e5\u770b\u5177\u4f53\u7684 ReleaseNote<\/a><\/p>\n
KEDA v2.9 \u6b63\u5f0f\u53d1\u5e03<\/h2>\n
KEDA \u662f\u4e00\u4e2a\u57fa\u4e8e Kubernetes \uff0c\u7531\u4e8b\u4ef6\u9a71\u52a8\u7684\u81ea\u52a8\u6269\u5bb9\u7ec4\u4ef6\uff0c\u5b83\u4e3a\u90e8\u7f72\u5728 Kubernetes \u4e0a\u7684\u5e94\u7528\u63d0\u4f9b\u4e86\u975e\u5e38\u7075\u6d3b\u7684\u5f39\u6027\u4f38\u7f29\u7684\u80fd\u529b\u3002<\/p>\n
\u5b83\u6700\u65b0\u53d1\u5e03\u7684 v2.9 \u5305\u542b\u4e86\u5f88\u591a\u503c\u5f97\u6ce8\u610f\u7684\u66f4\u65b0\uff1a<\/p>\n