要求

1. 部署jpress            # https
2. 网站打开就有类容
3. 数据持久？

1. 部署jpress

1. 上传jpress代码
rz
2. 解压jpress代码
unzip jpress-v3.2.5.war
4. 重新打war包 (需要jdk环境)
cd jpress-v3.2.5 
jar -cvf ROOT.war ./*
5. 修改Dockerfile 
vim /opt/jpress/Dockerfile 
FROM hub.c.163.com/library/tomcat
MAINTAINER  422943135@qq.com
RUN rm -rf /usr/local/tomcat/webapps/ROOT
COPY ROOT.war /usr/local/tomcat/webapps/
6. 制作镜像
docker build -t 172.16.0.24:180/public/jpress:v2 .
7. 启动镜像 初始化
docker run -d -p 8888:8080 172.16.0.24:180/public/jpress:v2
# 访问测试

MySQL 操作（MySQL不在集群内）

1.安装依赖
yum install -y ncurses-devel libaio-devel gcc gcc-c++ glibc cmake autoconf openssl openssl-devel
2.解压包
 tar xf mysql-5.6.46-linux-glibc2.12-x86_64.tar.gz
3.创建自定义目录
 mkdir /service
4.移动目录并做软连接
mv mysql-5.6.46-linux-glibc2.12-x86_64 /service/
ln -s /service/mysql-5.6.46-linux-glibc2.12-x86_64 /service/mysql
5.创建用户
 useradd mysql -s /sbin/nologin -M
6.拷贝配置文件和启动脚本
cd /service/mysql/support-files/
cp my-default.cnf /etc/my.cnf
cp: overwrite '/etc/my.cnf'? y   
# 主库配置文件
vim /etc/my.cnf
[mysqld]
basedir = /service/mysql
datadir = /service/mysql/data
port=mysql
server_id=1
skip_name_resolve
log_err=/service/mysql/data/mysql.err
log_bin=/service/mysql/data/mysql-bin

cp mysql.server /etc/init.d/mysqld
7.初识化3306数据库
 cd /service/mysql/scripts/
 ./mysql_install_db --user=mysql --basedir=/service/mysql --datadir=/service/mysql/data
8.配置system管理mysql
 vim /usr/lib/systemd/system/mysqld.service
[Unit]
Description=MySQL Server
Documentation=man:mysqld(8)
Documentation=https://dev.mysql.com/doc/refman/en/using-systemd.html
After=network.target
After=syslog.target
[Install]
WantedBy=multi-user.target
[Service]
User=mysql
Group=mysql
ExecStart=/service/mysql/bin/mysqld --defaults-file=/etc/my.cnf
LimitNOFILE = 5000

 systemctl daemon-reload
 systemctl start mysqld
9.配置环境变量
vim /etc/profile.d/mysql.sh
export PATH=/service/mysql/bin:$PATH
source /etc/profile
# 登录数据库
mysql> create database jpress;
mysql> grant all on *.* to lyw@'172.16.0.%' identified by '123';

2. 配置jpress镜像资源

7.上传镜像到仓库
docker push 172.16.0.24:180/public/jpress:v2
# master 启动启用jpress：v2镜像
vim jpressv2.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    appname: jpressv
  name: jpress-v3
spec:
  replicas: 1
  selector:
    matchLabels:
      appname: jpressv
  template:
    metadata:
      labels:
        appname: jpressv
    spec:
      containers:
      - image: 172.16.0.24:180/public/jpress:v2
        name: jpressv
        ports:
          - containerPort: 8080
      imagePullSecrets:
        - name: login
# 启动
 kubectl apply -f jpressv2.yaml 
# 映射端口
kubectl expose deployment jpress-v2 --port=8080 --type=NodePort
# 查看端口
kubectget svc
NAME                TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)         AGE
jpress-v2           NodePort    10.96.91.253   <none>        8080:21349/TCP   41s

# 发布文章

3. 打包jpress 代码包重新制作镜像 并使用HTTPS

# node节点复制代码
[root@kubernetes-node-01 tmp]# docker cp 01723ee49640:/usr/local/tomcat/webapps/ROOT/ /opt
# 发送代码到harbor服务器
[root@kubernetes-node-01 opt]# scp -r ROOT root@172.16.0.24:/opt
# 删除原来代码
[root@kubernetes-lb jpress]# rm -rf ROOT.war
# 重新打包代码
[root@kubernetes-lb ROOT]# jar -cvf ROOT.war ./*
[root@kubernetes-lb opt]#  mv ROOT/ROOT.war jpress/
# 制作镜像
[root@kubernetes-lb jpress]# docker build -t 172.16.0.24:180/public/jpress:v5 .
[root@kubernetes-lb jpress]# docker push 172.16.0.24:180/public/jpress:v5
# 配置https
# 自签证书
openssl genrsa -out tls.key 2048
openssl req -new -x509 -key tls.key -out tls.crt -subj /C=CN/ST=ShangHai/L=ShangHai/O=Ingress/CN=www.jpres.com

# 上传集群
kubectl -n default create secret tls ingress-tls --cert=tls.crt --key=tls.key
# 查看
kubectl get secrets
[root@kubernetes-master-01 ~]# kubectl get secrets
NAME                  TYPE                                  DATA   AGE
default-token-jzqnf   kubernetes.io/service-account-token   3      8h
ingress-tls           kubernetes.io/tls                     2      14m
login                 kubernetes.io/dockerconfigjson        1      8h

[root@kubernetes-master-01 ~]# vim www.jpressv2.yaml 
kind: Deployment
apiVersion: apps/v1
metadata:
  name: ingress-jpress
  namespace: default
  labels:
    app: deployment
spec:
  replicas: 1
  selector:
    matchLabels:
      app: pod
  template:
    metadata:
      labels:
        app: pod
    spec:
      containers:
        - name: ingress-pod
          image: 172.16.0.24:180/public/jpress:v5
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 8080
              name: http
---
kind: Service
apiVersion: v1
metadata:
  name: jpress-service
  namespace: default
  labels:
    app: svc
spec:
  type: ClusterIP
  selector:
    app: pod
  ports:
    - port: 8080
      targetPort: 8080
      name: http
---
kind: Ingress
apiVersion: extensions/v1beta1
metadata:
  name: ingress-ingress
  namespace: default
  annotations:
    kubernetes.io/ingress.class: "nginx"
spec:
  tls:
    - secretName: tls
  rules:
    - host: www.jpress.com
      http:
        paths:
          - path: /
            backend:
              serviceName: jpress-service
              servicePort: 8080
# 启动
[root@kubernetes-master-01 ~]# kubectl apply -f jpressv2.yaml
deployment.apps/jpress-v3 created
service/jpress-v3 created
[root@kubernetes-master-01 ~]# kubectl get pods,svc
[root@kubernetes-master-01 ~]# kubectl get pods,svc
NAME                                 READY   STATUS    RESTARTS   AGE
pod/ingress-jpress-67df46bfb-rrpwn   1/1     Running   0          6m17s

NAME                     TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)    AGE
service/jpress-service   ClusterIP   10.96.48.220   <none>        8080/TCP   6m17s
service/kubernetes       ClusterIP   10.96.0.1      <none>        443/TCP    9h
[root@kubernetes-master-01 ~]# kubectl get svc -n ingress-nginx
NAME                                 TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
ingress-nginx-controller             NodePort    10.96.190.176   <none>        80:44888/TCP,443:25838/TCP   7m15s
ingress-nginx-controller-admission   ClusterIP   10.96.237.57    <none>        443/TCP                      7m15s
# 访问