-
Notifications
You must be signed in to change notification settings - Fork 50
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add clusterlink-proxy deploy yaml file and remote-debug shell
Signed-off-by: chengjin <chengjin_yewu@cmss.chinamobile.com>
Showing
5 changed files
with
348 additions
and
91 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,169 @@ | ||
--- | ||
apiVersion: v1 | ||
kind: Service | ||
metadata: | ||
name: clusterlink-proxy | ||
namespace: kosmos-system | ||
spec: | ||
ports: | ||
- port: 443 | ||
name: tls | ||
protocol: TCP | ||
targetPort: 443 | ||
- name: pprof | ||
port: 6060 | ||
protocol: TCP | ||
targetPort: 6060 | ||
type: NodePort | ||
selector: | ||
apiserver: "true" | ||
app: clusterlink-proxy | ||
--- | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
labels: | ||
app: clusterlink-proxy | ||
apiserver: "true" | ||
name: clusterlink-proxy | ||
namespace: kosmos-system | ||
spec: | ||
replicas: 1 | ||
selector: | ||
matchLabels: | ||
app: clusterlink-proxy | ||
apiserver: "true" | ||
template: | ||
metadata: | ||
labels: | ||
app: clusterlink-proxy | ||
apiserver: "true" | ||
spec: | ||
serviceAccountName: apiserver | ||
containers: | ||
- name: clusterlink-proxy | ||
command: | ||
- /bin/clusterlink-proxy | ||
- --enable-pprof=true | ||
image: ghcr.io/kosmos-io/clusterlink-proxy:__VERSION__ | ||
imagePullPolicy: IfNotPresent | ||
resources: | ||
requests: | ||
cpu: 2 | ||
memory: "4Gi" | ||
limits: | ||
cpu: 2 | ||
memory: "4Gi" | ||
livenessProbe: | ||
failureThreshold: 3 | ||
httpGet: | ||
path: /livez | ||
port: 443 | ||
scheme: HTTPS | ||
initialDelaySeconds: 15 | ||
periodSeconds: 15 | ||
successThreshold: 1 | ||
timeoutSeconds: 5 | ||
dnsPolicy: ClusterFirst | ||
restartPolicy: Always | ||
schedulerName: default-scheduler | ||
terminationGracePeriodSeconds: 30 | ||
--- | ||
apiVersion: apiregistration.k8s.io/v1 | ||
kind: APIService | ||
metadata: | ||
labels: | ||
app: clusterlink-proxy | ||
name: v1alpha1.proxy.kosmos.io | ||
spec: | ||
insecureSkipTLSVerify: true | ||
group: proxy.kosmos.io | ||
groupPriorityMinimum: 2000 | ||
service: | ||
name: clusterlink-proxy | ||
namespace: kosmos-system | ||
port: 443 | ||
version: v1alpha1 | ||
versionPriority: 10 | ||
--- | ||
apiVersion: v1 | ||
kind: ServiceAccount | ||
metadata: | ||
name: apiserver | ||
namespace: kosmos-system | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRole | ||
metadata: | ||
name: clusterlink-proxy-clusterrole | ||
rules: | ||
- apiGroups: | ||
- "*" | ||
resources: | ||
- "*" | ||
verbs: | ||
- "*" | ||
- nonResourceURLs: | ||
- "*" | ||
verbs: | ||
- "*" | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRoleBinding | ||
metadata: | ||
name: clusterlink-proxy-clusterrolebinding | ||
roleRef: | ||
apiGroup: rbac.authorization.k8s.io | ||
kind: ClusterRole | ||
name: clusterlink-proxy-clusterrole | ||
subjects: | ||
- kind: ServiceAccount | ||
name: apiserver | ||
namespace: kosmos-system | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: RoleBinding | ||
metadata: | ||
name: clusterlink-proxy-auth-reader | ||
namespace: kube-system | ||
roleRef: | ||
apiGroup: rbac.authorization.k8s.io | ||
kind: Role | ||
name: extension-apiserver-authentication-reader | ||
subjects: | ||
- kind: ServiceAccount | ||
name: apiserver | ||
namespace: kosmos-system | ||
--- | ||
apiVersion: rbac.authorization.k8s.io/v1 | ||
kind: ClusterRoleBinding | ||
metadata: | ||
name: kosmos-system:auth-delegator | ||
roleRef: | ||
apiGroup: rbac.authorization.k8s.io | ||
kind: ClusterRole | ||
name: system:auth-delegator | ||
subjects: | ||
- kind: ServiceAccount | ||
name: apiserver | ||
namespace: kosmos-system | ||
--- | ||
apiVersion: autoscaling/v2 | ||
kind: HorizontalPodAutoscaler | ||
metadata: | ||
name: clusterlink-proxy-hpa | ||
namespace: kosmos-system | ||
spec: | ||
scaleTargetRef: | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
name: clusterlink-proxy | ||
minReplicas: 1 | ||
maxReplicas: 10 | ||
metrics: | ||
- type: Resource | ||
resource: | ||
name: memory | ||
target: | ||
type: Utilization | ||
averageUtilization: 85 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,153 @@ | ||
--- | ||
apiVersion: apiextensions.k8s.io/v1 | ||
kind: CustomResourceDefinition | ||
metadata: | ||
annotations: | ||
controller-gen.kubebuilder.io/version: v0.14.0 | ||
name: resourcecaches.kosmos.io | ||
spec: | ||
group: kosmos.io | ||
names: | ||
kind: ResourceCache | ||
listKind: ResourceCacheList | ||
plural: resourcecaches | ||
singular: resourcecache | ||
scope: Namespaced | ||
versions: | ||
- name: v1alpha1 | ||
schema: | ||
openAPIV3Schema: | ||
description: ResourceCache represents the configuration of the cache resource | ||
properties: | ||
apiVersion: | ||
description: |- | ||
APIVersion defines the versioned schema of this representation of an object. | ||
Servers should convert recognized schemas to the latest internal value, and | ||
may reject unrecognized values. | ||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources | ||
type: string | ||
kind: | ||
description: |- | ||
Kind is a string value representing the REST resource this object represents. | ||
Servers may infer this from the endpoint the client submits requests to. | ||
Cannot be updated. | ||
In CamelCase. | ||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds | ||
type: string | ||
metadata: | ||
type: object | ||
spec: | ||
description: ResourceCacheSpec defines the desired state of ResourceCache | ||
properties: | ||
resourceSelectors: | ||
description: | ||
ResourceSelectors specifies the resources type that should | ||
be cached by cache system. | ||
items: | ||
description: | ||
ResourceSelector specifies the resources type and its | ||
scope. | ||
properties: | ||
apiVersion: | ||
description: | ||
APIVersion represents the API version of the target | ||
resources. | ||
type: string | ||
kind: | ||
description: Kind represents the kind of the target resources. | ||
type: string | ||
namespace: | ||
description: |- | ||
Namespace of the target resource. | ||
Default is empty, which means all namespaces. | ||
items: | ||
type: string | ||
type: array | ||
required: | ||
- apiVersion | ||
- kind | ||
type: object | ||
type: array | ||
required: | ||
- resourceSelectors | ||
type: object | ||
status: | ||
description: ResourceCacheStatus defines the observed state of ResourceCache | ||
properties: | ||
conditions: | ||
description: Conditions contain the different condition statuses. | ||
items: | ||
description: | ||
"Condition contains details for one aspect of the current | ||
state of this API Resource.\n---\nThis struct is intended for | ||
direct use as an array at the field path .status.conditions. For | ||
example,\n\n\n\ttype FooStatus struct{\n\t // Represents the | ||
observations of a foo's current state.\n\t // Known .status.conditions.type | ||
are: \"Available\", \"Progressing\", and \"Degraded\"\n\t // | ||
+patchMergeKey=type\n\t // +patchStrategy=merge\n\t // +listType=map\n\t | ||
\ // +listMapKey=type\n\t Conditions []metav1.Condition `json:\"conditions,omitempty\" | ||
patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t | ||
\ // other fields\n\t}" | ||
properties: | ||
lastTransitionTime: | ||
description: |- | ||
lastTransitionTime is the last time the condition transitioned from one status to another. | ||
This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable. | ||
format: date-time | ||
type: string | ||
message: | ||
description: |- | ||
message is a human readable message indicating details about the transition. | ||
This may be an empty string. | ||
maxLength: 32768 | ||
type: string | ||
observedGeneration: | ||
description: |- | ||
observedGeneration represents the .metadata.generation that the condition was set based upon. | ||
For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date | ||
with respect to the current state of the instance. | ||
format: int64 | ||
minimum: 0 | ||
type: integer | ||
reason: | ||
description: |- | ||
reason contains a programmatic identifier indicating the reason for the condition's last transition. | ||
Producers of specific condition types may define expected values and meanings for this field, | ||
and whether the values are considered a guaranteed API. | ||
The value should be a CamelCase string. | ||
This field may not be empty. | ||
maxLength: 1024 | ||
minLength: 1 | ||
pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$ | ||
type: string | ||
status: | ||
description: status of the condition, one of True, False, Unknown. | ||
enum: | ||
- "True" | ||
- "False" | ||
- Unknown | ||
type: string | ||
type: | ||
description: |- | ||
type of condition in CamelCase or in foo.example.com/CamelCase. | ||
--- | ||
Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be | ||
useful (see .node.status.conditions), the ability to deconflict is important. | ||
The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt) | ||
maxLength: 316 | ||
pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$ | ||
type: string | ||
required: | ||
- lastTransitionTime | ||
- message | ||
- reason | ||
- status | ||
- type | ||
type: object | ||
type: array | ||
type: object | ||
type: object | ||
served: true | ||
storage: true | ||
subresources: | ||
status: {} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
# nocalhost remote debug shell for clusterlink/proxy | ||
export G0111MODULE=on; | ||
export GOPROXY='https://goproxy.cn,direct'; | ||
export GOSUMDB=off; | ||
dlv --headless --log --listen :9009 --api-version 2 --accept-multiclient debug /home/nocalhost-dev/cmd/clusterlink/proxy/main.go -- --enable-pprof=true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters