281 lines
11 KiB
Markdown
281 lines
11 KiB
Markdown
## DevContainer（Kubernetes + Istio）本地运行
|
||
|
||
仅保留三点：Istio 1.27.1 安装、app.ini 手动配置、安装 Devcontainer CRD（内嵌 YAML）。
|
||
|
||
### 1) 安装 Istio 1.27.1（指定版本）
|
||
|
||
```bash
|
||
ISTIO_VER=1.27.1
|
||
curl -L https://istio.io/downloadIstio | ISTIO_VERSION=${ISTIO_VER} sh -
|
||
export PATH="$PWD/istio-${ISTIO_VER}/bin:$PATH"
|
||
|
||
istioctl x precheck
|
||
istioctl install -y --set profile=default
|
||
|
||
kubectl -n istio-system get svc istio-ingressgateway -o wide
|
||
```
|
||
|
||
说明：本项目 WebTerminal 使用 HTTP/80，经 `istio-ingressgateway` 进入，无需立刻配置 HTTPS。
|
||
|
||
### 2) 本地 app.ini 手动配置（非helm安装的 devstar 不会自动写入）
|
||
|
||
文件：`devstar/custom/conf/app.ini`
|
||
|
||
```ini
|
||
|
||
[devstar.devcontainer]
|
||
NAMESPACE = default # 创建的devcontainer所在的命名空间
|
||
HOST = 192.168.23.138 # 和[server].DOMAIN一致
|
||
```
|
||
|
||
保存后重启后端以加载配置。
|
||
|
||
### 3) 安装 Devcontainer CRD（内嵌 YAML，可直接 apply）
|
||
|
||
可直接复制以下清单，通过标准输入安装：
|
||
|
||
```bash
|
||
kubectl apply -f - <<'YAML'
|
||
---
|
||
apiVersion: apiextensions.k8s.io/v1
|
||
kind: CustomResourceDefinition
|
||
metadata:
|
||
annotations:
|
||
controller-gen.kubebuilder.io/version: v0.16.1
|
||
name: devcontainerapps.devcontainer.devstar.cn
|
||
spec:
|
||
group: devcontainer.devstar.cn
|
||
names:
|
||
kind: DevcontainerApp
|
||
listKind: DevcontainerAppList
|
||
plural: devcontainerapps
|
||
singular: devcontainerapp
|
||
scope: Namespaced
|
||
versions:
|
||
- name: v1
|
||
schema:
|
||
openAPIV3Schema:
|
||
description: DevcontainerApp is the Schema for the devcontainerapps API
|
||
properties:
|
||
apiVersion:
|
||
description: |-
|
||
APIVersion defines the versioned schema of this representation of an object.
|
||
Servers should convert recognized schemas to the latest internal value, and
|
||
may reject unrecognized values.
|
||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
||
type: string
|
||
kind:
|
||
description: |-
|
||
Kind is a string value representing the REST resource this object represents.
|
||
Servers may infer this from the endpoint the client submits requests to.
|
||
Cannot be updated.
|
||
In CamelCase.
|
||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
||
type: string
|
||
metadata:
|
||
type: object
|
||
spec:
|
||
description: DevcontainerAppSpec defines the desired state of DevcontainerApp
|
||
properties:
|
||
failedJobsHistoryLimit:
|
||
description: |-
|
||
The number of failed finished jobs to retain.
|
||
This is a pointer to distinguish between explicit zero and not specified.
|
||
format: int32
|
||
minimum: 0
|
||
type: integer
|
||
service:
|
||
description: ServiceSpec specifies Service for DevContainer
|
||
properties:
|
||
extraPorts:
|
||
description: ExtraPorts 定义额外的端口配置
|
||
items:
|
||
description: ExtraPortSpec 定义额外端口配置
|
||
properties:
|
||
containerPort:
|
||
description: ContainerPort 是容器内的端口号
|
||
maximum: 65535
|
||
minimum: 1
|
||
type: integer
|
||
name:
|
||
description: Name 是端口的名称
|
||
type: string
|
||
servicePort:
|
||
description: ServicePort 是服务暴露的端口号
|
||
maximum: 65535
|
||
minimum: 1
|
||
type: integer
|
||
required:
|
||
- containerPort
|
||
- servicePort
|
||
type: object
|
||
type: array
|
||
nodePort:
|
||
maximum: 32767
|
||
minimum: 30000
|
||
type: integer
|
||
servicePort:
|
||
minimum: 1
|
||
type: integer
|
||
type: object
|
||
startingDeadlineSeconds:
|
||
description: |-
|
||
Optional deadline in seconds for starting the job if it misses scheduled
|
||
time for any reason. Missed jobs executions will be counted as failed ones.
|
||
format: int64
|
||
minimum: 0
|
||
type: integer
|
||
statefulset:
|
||
description: StatefulSetSpec specifies StatefulSet for DevContainer
|
||
properties:
|
||
command:
|
||
items:
|
||
type: string
|
||
type: array
|
||
containerPort:
|
||
minimum: 1
|
||
type: integer
|
||
gitRepositoryURL:
|
||
type: string
|
||
image:
|
||
type: string
|
||
sshPublicKeyList:
|
||
description: 至少包含一个 SSH Public Key 才能通过校验规则
|
||
items:
|
||
type: string
|
||
minItems: 1
|
||
type: array
|
||
required:
|
||
- command
|
||
- gitRepositoryURL
|
||
- image
|
||
- sshPublicKeyList
|
||
type: object
|
||
successfulJobsHistoryLimit:
|
||
description: |-
|
||
The number of successful finished jobs to retain.
|
||
This is a pointer to distinguish between explicit zero and not specified.
|
||
format: int32
|
||
minimum: 0
|
||
type: integer
|
||
suspend:
|
||
description: |-
|
||
This flag tells the controller to suspend subsequent executions, it does
|
||
not apply to already started executions. Defaults to false.
|
||
type: boolean
|
||
required:
|
||
- statefulset
|
||
type: object
|
||
status:
|
||
description: DevcontainerAppStatus defines the observed state of DevcontainerApp
|
||
properties:
|
||
active:
|
||
description: A list of pointers to currently running jobs.
|
||
items:
|
||
description: ObjectReference contains enough information to let
|
||
you inspect or modify the referred object.
|
||
properties:
|
||
apiVersion:
|
||
description: API version of the referent.
|
||
type: string
|
||
fieldPath:
|
||
description: |-
|
||
If referring to a piece of an object instead of an entire object, this string
|
||
should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
|
||
For example, if the object reference is to a container within a pod, this would take on a value like:
|
||
"spec.containers{name}" (where "name" refers to the name of the container that triggered
|
||
the event) or if no container name is specified "spec.containers[2]" (container with
|
||
index 2 in this pod). This syntax is chosen only to have some well-defined way of
|
||
referencing a part of an object.
|
||
type: string
|
||
kind:
|
||
description: |-
|
||
Kind of the referent.
|
||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
||
type: string
|
||
name:
|
||
description: |-
|
||
Name of the referent.
|
||
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
|
||
type: string
|
||
namespace:
|
||
description: |-
|
||
Namespace of the referent.
|
||
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
|
||
type: string
|
||
resourceVersion:
|
||
description: |-
|
||
Specific resourceVersion to which this reference is made, if any.
|
||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
|
||
type: string
|
||
uid:
|
||
description: |-
|
||
UID of the referent.
|
||
More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
|
||
type: string
|
||
type: object
|
||
x-kubernetes-map-type: atomic
|
||
type: array
|
||
extraPortsAssigned:
|
||
description: ExtraPortsAssigned 存储额外端口映射的 NodePort
|
||
items:
|
||
description: ExtraPortAssigned 定义已分配的额外端口信息
|
||
properties:
|
||
containerPort:
|
||
description: ContainerPort 是容器内的端口号
|
||
type: integer
|
||
name:
|
||
description: Name 是端口的名称
|
||
type: string
|
||
nodePort:
|
||
description: NodePort 是 Kubernetes 分配的 NodePort
|
||
type: integer
|
||
servicePort:
|
||
description: ServicePort 是服务暴露的端口号
|
||
type: integer
|
||
required:
|
||
- containerPort
|
||
- nodePort
|
||
- servicePort
|
||
type: object
|
||
type: array
|
||
lastScheduleTime:
|
||
description: Information when was the last time the job was successfully
|
||
scheduled.
|
||
format: date-time
|
||
type: string
|
||
nodePortAssigned:
|
||
description: NodePortAssigned 存储 DevcontainerApp CRD调度后集群分配的 NodePort
|
||
type: integer
|
||
ready:
|
||
description: Ready 标识 DevcontainerApp 管理的 Pod 的 Readiness Probe 是否达到就绪状态
|
||
type: boolean
|
||
type: object
|
||
type: object
|
||
served: true
|
||
storage: true
|
||
subresources:
|
||
status: {}
|
||
YAML
|
||
```
|
||
|
||
验证 CRD：
|
||
|
||
```bash
|
||
kubectl get crd devcontainerapps.devcontainer.devstar.cn -o wide
|
||
```
|
||
|
||
### 4) 编译与运行 controller-manager（必需）
|
||
|
||
controller-manager 负责监听 `DevcontainerApp` CR，并创建/更新/删除底层 K8s 资源（StatefulSet、Service 等），并回写 `Status.Ready` 等状态。仅安装 CRD 不会触发任何实际资源变更，必须运行 controller-manager 才会生效。
|
||
|
||
- 在主目录编译并运行：
|
||
|
||
```bash
|
||
cd /home/psx/devstar-main
|
||
make controller-manager
|
||
./controller-manager
|
||
# 观察日志：应能看到 Reconcile 日志；创建 DevcontainerApp 后会创建 sts/svc
|
||
```
|
||
|