• 云原生（三十） | Kubernetes篇之应用商店-Helm

    文章目录

    应用商店-Helm

    一、简介

    二、安装

    1、用二进制版本安装

    三、入门使用

    1、三大概念

    2、charts 结构

    3、应用安装

    4、自定义变量值

     5、命令

    6、推送helm chart

    应用商店-Helm

    一、简介

    二、安装

    1、用二进制版本安装

    每个Helm版本都提供了各种操作系统的二进制版本，这些版本可以手动下载和安装。

    1. 下载 需要的版本

    2. 解压(tar -zxvf helm-v3.0.0-linux-amd64.tar.gz)

    3. 在解压目中找到helm程序，移动到需要的目录中(mv linux-amd64/helm /usr/local/bin/helm)

    1. #!/usr/bin/env bash
    2.  
    3. # Copyright The Helm Authors.
    4. #
    5. # Licensed under the Apache License, Version 2.0 (the "License");
    6. # you may not use this file except in compliance with the License.
    7. # You may obtain a copy of the License at
    8. #
    9. #     http://www.apache.org/licenses/LICENSE-2.0
    10. #
    11. # Unless required by applicable law or agreed to in writing, software
    12. # distributed under the License is distributed on an "AS IS" BASIS,
    13. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    14. # See the License for the specific language governing permissions and
    15. # limitations under the License.
    16.  
    17. # The install script is based off of the MIT-licensed script from glide,
    18. # the package manager for Go: https://github.com/Masterminds/glide.sh/blob/master/get
    19.  
    20. : ${BINARY_NAME:="helm"}
    21. : ${USE_SUDO:="true"}
    22. : ${DEBUG:="false"}
    23. : ${VERIFY_CHECKSUM:="true"}
    24. : ${VERIFY_SIGNATURES:="false"}
    25. : ${HELM_INSTALL_DIR:="/usr/local/bin"}
    26. : ${GPG_PUBRING:="pubring.kbx"}
    27.  
    28. HAS_CURL="$(type "curl" &> /dev/null && echo true || echo false)"
    29. HAS_WGET="$(type "wget" &> /dev/null && echo true || echo false)"
    30. HAS_OPENSSL="$(type "openssl" &> /dev/null && echo true || echo false)"
    31. HAS_GPG="$(type "gpg" &> /dev/null && echo true || echo false)"
    32.  
    33. # initArch discovers the architecture for this system.
    34. initArch() {
    35.   ARCH=$(uname -m)
    36.   case $ARCH in
    37.     armv5*) ARCH="armv5";;
    38.     armv6*) ARCH="armv6";;
    39.     armv7*) ARCH="arm";;
    40.     aarch64) ARCH="arm64";;
    41.     x86) ARCH="386";;
    42.     x86_64) ARCH="amd64";;
    43.     i686) ARCH="386";;
    44.     i386) ARCH="386";;
    45.   esac
    46. }
    47.  
    48. # initOS discovers the operating system for this system.
    49. initOS() {
    50.   OS=$(echo `uname`|tr '[:upper:]' '[:lower:]')
    51.  
    52.   case "$OS" in
    53.     # Minimalist GNU for Windows
    54.     mingw*) OS='windows';;
    55.   esac
    56. }
    57.  
    58. # runs the given command as root (detects if we are root already)
    59. runAsRoot() {
    60.   if [ $EUID -ne 0 -a "$USE_SUDO" = "true" ]; then
    61.     sudo "${@}"
    62.   else
    63.     "${@}"
    64.   fi
    65. }
    66.  
    67. # verifySupported checks that the os/arch combination is supported for
    68. # binary builds, as well whether or not necessary tools are present.
    69. verifySupported() {
    70.   local supported="darwin-amd64\ndarwin-arm64\nlinux-386\nlinux-amd64\nlinux-arm\nlinux-arm64\nlinux-ppc64le\nlinux-s390x\nwindows-amd64"
    71.   if ! echo "${supported}" | grep -q "${OS}-${ARCH}"; then
    72.     echo "No prebuilt binary for ${OS}-${ARCH}."
    73.     echo "To build from source, go to https://github.com/helm/helm"
    74.     exit 1
    75.   fi
    76.  
    77.   if [ "${HAS_CURL}" != "true" ] && [ "${HAS_WGET}" != "true" ]; then
    78.     echo "Either curl or wget is required"
    79.     exit 1
    80.   fi
    81.  
    82.   if [ "${VERIFY_CHECKSUM}" == "true" ] && [ "${HAS_OPENSSL}" != "true" ]; then
    83.     echo "In order to verify checksum, openssl must first be installed."
    84.     echo "Please install openssl or set VERIFY_CHECKSUM=false in your environment."
    85.     exit 1
    86.   fi
    87.  
    88.   if [ "${VERIFY_SIGNATURES}" == "true" ]; then
    89.     if [ "${HAS_GPG}" != "true" ]; then
    90.       echo "In order to verify signatures, gpg must first be installed."
    91.       echo "Please install gpg or set VERIFY_SIGNATURES=false in your environment."
    92.       exit 1
    93.     fi
    94.     if [ "${OS}" != "linux" ]; then
    95.       echo "Signature verification is currently only supported on Linux."
    96.       echo "Please set VERIFY_SIGNATURES=false or verify the signatures manually."
    97.       exit 1
    98.     fi
    99.   fi
    100. }
    101.  
    102. # checkDesiredVersion checks if the desired version is available.
    103. checkDesiredVersion() {
    104.   if [ "x$DESIRED_VERSION" == "x" ]; then
    105.     # Get tag from release URL
    106.     local latest_release_url="https://github.com/helm/helm/releases"
    107.     if [ "${HAS_CURL}" == "true" ]; then
    108.       TAG=$(curl -Ls $latest_release_url | grep 'href="/helm/helm/releases/tag/v3.[0-9]*.[0-9]*\"' | grep -v no-underline | head -n 1 | cut -d '"' -f 2 | awk '{n=split($NF,a,"/");print a[n]}' | awk 'a !~ $0{print}; {a=$0}')
    109.     elif [ "${HAS_WGET}" == "true" ]; then
    110.       TAG=$(wget $latest_release_url -O - 2>&1 | grep 'href="/helm/helm/releases/tag/v3.[0-9]*.[0-9]*\"' | grep -v no-underline | head -n 1 | cut -d '"' -f 2 | awk '{n=split($NF,a,"/");print a[n]}' | awk 'a !~ $0{print}; {a=$0}')
    111.     fi
    112.   else
    113.     TAG=$DESIRED_VERSION
    114.   fi
    115. }
    116.  
    117. # checkHelmInstalledVersion checks which version of helm is installed and
    118. # if it needs to be changed.
    119. checkHelmInstalledVersion() {
    120.   if [[ -f "${HELM_INSTALL_DIR}/${BINARY_NAME}" ]]; then
    121.     local version=$("${HELM_INSTALL_DIR}/${BINARY_NAME}" version --template="{{ .Version }}")
    122.     if [[ "$version" == "$TAG" ]]; then
    123.       echo "Helm ${version} is already ${DESIRED_VERSION:-latest}"
    124.       return 0
    125.     else
    126.       echo "Helm ${TAG} is available. Changing from version ${version}."
    127.       return 1
    128.     fi
    129.   else
    130.     return 1
    131.   fi
    132. }
    133.  
    134. # downloadFile downloads the latest binary package and also the checksum
    135. # for that binary.
    136. downloadFile() {
    137.   HELM_DIST="helm-$TAG-$OS-$ARCH.tar.gz"
    138.   DOWNLOAD_URL="https://get.helm.sh/$HELM_DIST"
    139.   CHECKSUM_URL="$DOWNLOAD_URL.sha256"
    140.   HELM_TMP_ROOT="$(mktemp -dt helm-installer-XXXXXX)"
    141.   HELM_TMP_FILE="$HELM_TMP_ROOT/$HELM_DIST"
    142.   HELM_SUM_FILE="$HELM_TMP_ROOT/$HELM_DIST.sha256"
    143.   echo "Downloading $DOWNLOAD_URL"
    144.   if [ "${HAS_CURL}" == "true" ]; then
    145.     curl -SsL "$CHECKSUM_URL" -o "$HELM_SUM_FILE"
    146.     curl -SsL "$DOWNLOAD_URL" -o "$HELM_TMP_FILE"
    147.   elif [ "${HAS_WGET}" == "true" ]; then
    148.     wget -q -O "$HELM_SUM_FILE" "$CHECKSUM_URL"
    149.     wget -q -O "$HELM_TMP_FILE" "$DOWNLOAD_URL"
    150.   fi
    151. }
    152.  
    153. # verifyFile verifies the SHA256 checksum of the binary package
    154. # and the GPG signatures for both the package and checksum file
    155. # (depending on settings in environment).
    156. verifyFile() {
    157.   if [ "${VERIFY_CHECKSUM}" == "true" ]; then
    158.     verifyChecksum
    159.   fi
    160.   if [ "${VERIFY_SIGNATURES}" == "true" ]; then
    161.     verifySignatures
    162.   fi
    163. }
    164.  
    165. # installFile installs the Helm binary.
    166. installFile() {
    167.   HELM_TMP="$HELM_TMP_ROOT/$BINARY_NAME"
    168.   mkdir -p "$HELM_TMP"
    169.   tar xf "$HELM_TMP_FILE" -C "$HELM_TMP"
    170.   HELM_TMP_BIN="$HELM_TMP/$OS-$ARCH/helm"
    171.   echo "Preparing to install $BINARY_NAME into ${HELM_INSTALL_DIR}"
    172.   runAsRoot cp "$HELM_TMP_BIN" "$HELM_INSTALL_DIR/$BINARY_NAME"
    173.   echo "$BINARY_NAME installed into $HELM_INSTALL_DIR/$BINARY_NAME"
    174. }
    175.  
    176. # verifyChecksum verifies the SHA256 checksum of the binary package.
    177. verifyChecksum() {
    178.   printf "Verifying checksum... "
    179.   local sum=$(openssl sha1 -sha256 ${HELM_TMP_FILE} | awk '{print $2}')
    180.   local expected_sum=$(cat ${HELM_SUM_FILE})
    181.   if [ "$sum" != "$expected_sum" ]; then
    182.     echo "SHA sum of ${HELM_TMP_FILE} does not match. Aborting."
    183.     exit 1
    184.   fi
    185.   echo "Done."
    186. }
    187.  
    188. # verifySignatures obtains the latest KEYS file from GitHub main branch
    189. # as well as the signature .asc files from the specific GitHub release,
    190. # then verifies that the release artifacts were signed by a maintainer's key.
    191. verifySignatures() {
    192.   printf "Verifying signatures... "
    193.   local keys_filename="KEYS"
    194.   local github_keys_url="https://raw.githubusercontent.com/helm/helm/main/${keys_filename}"
    195.   if [ "${HAS_CURL}" == "true" ]; then
    196.     curl -SsL "${github_keys_url}" -o "${HELM_TMP_ROOT}/${keys_filename}"
    197.   elif [ "${HAS_WGET}" == "true" ]; then
    198.     wget -q -O "${HELM_TMP_ROOT}/${keys_filename}" "${github_keys_url}"
    199.   fi
    200.   local gpg_keyring="${HELM_TMP_ROOT}/keyring.gpg"
    201.   local gpg_homedir="${HELM_TMP_ROOT}/gnupg"
    202.   mkdir -p -m 0700 "${gpg_homedir}"
    203.   local gpg_stderr_device="/dev/null"
    204.   if [ "${DEBUG}" == "true" ]; then
    205.     gpg_stderr_device="/dev/stderr"
    206.   fi
    207.   gpg --batch --quiet --homedir="${gpg_homedir}" --import "${HELM_TMP_ROOT}/${keys_filename}" 2> "${gpg_stderr_device}"
    208.   gpg --batch --no-default-keyring --keyring "${gpg_homedir}/${GPG_PUBRING}" --export > "${gpg_keyring}"
    209.   local github_release_url="https://github.com/helm/helm/releases/download/${TAG}"
    210.   if [ "${HAS_CURL}" == "true" ]; then
    211.     curl -SsL "${github_release_url}/helm-${TAG}-${OS}-${ARCH}.tar.gz.sha256.asc" -o "${HELM_TMP_ROOT}/helm-${TAG}-${OS}-${ARCH}.tar.gz.sha256.asc"
    212.     curl -SsL "${github_release_url}/helm-${TAG}-${OS}-${ARCH}.tar.gz.asc" -o "${HELM_TMP_ROOT}/helm-${TAG}-${OS}-${ARCH}.tar.gz.asc"
    213.   elif [ "${HAS_WGET}" == "true" ]; then
    214.     wget -q -O "${HELM_TMP_ROOT}/helm-${TAG}-${OS}-${ARCH}.tar.gz.sha256.asc" "${github_release_url}/helm-${TAG}-${OS}-${ARCH}.tar.gz.sha256.asc"
    215.     wget -q -O "${HELM_TMP_ROOT}/helm-${TAG}-${OS}-${ARCH}.tar.gz.asc" "${github_release_url}/helm-${TAG}-${OS}-${ARCH}.tar.gz.asc"
    216.   fi
    217.   local error_text="If you think this might be a potential security issue,"
    218.   error_text="${error_text}\nplease see here: https://github.com/helm/community/blob/master/SECURITY.md"
    219.   local num_goodlines_sha=$(gpg --verify --keyring="${gpg_keyring}" --status-fd=1 "${HELM_TMP_ROOT}/helm-${TAG}-${OS}-${ARCH}.tar.gz.sha256.asc" 2> "${gpg_stderr_device}" | grep -c -E '^\[GNUPG:\] (GOODSIG|VALIDSIG)')
    220.   if [[ ${num_goodlines_sha} -lt 2 ]]; then
    221.     echo "Unable to verify the signature of helm-${TAG}-${OS}-${ARCH}.tar.gz.sha256!"
    222.     echo -e "${error_text}"
    223.     exit 1
    224.   fi
    225.   local num_goodlines_tar=$(gpg --verify --keyring="${gpg_keyring}" --status-fd=1 "${HELM_TMP_ROOT}/helm-${TAG}-${OS}-${ARCH}.tar.gz.asc" 2> "${gpg_stderr_device}" | grep -c -E '^\[GNUPG:\] (GOODSIG|VALIDSIG)')
    226.   if [[ ${num_goodlines_tar} -lt 2 ]]; then
    227.     echo "Unable to verify the signature of helm-${TAG}-${OS}-${ARCH}.tar.gz!"
    228.     echo -e "${error_text}"
    229.     exit 1
    230.   fi
    231.   echo "Done."
    232. }
    233.  
    234. # fail_trap is executed if an error occurs.
    235. fail_trap() {
    236.   result=$?
    237.   if [ "$result" != "0" ]; then
    238.     if [[ -n "$INPUT_ARGUMENTS" ]]; then
    239.       echo "Failed to install $BINARY_NAME with the arguments provided: $INPUT_ARGUMENTS"
    240.       help
    241.     else
    242.       echo "Failed to install $BINARY_NAME"
    243.     fi
    244.     echo -e "\tFor support, go to https://github.com/helm/helm."
    245.   fi
    246.   cleanup
    247.   exit $result
    248. }
    249.  
    250. # testVersion tests the installed client to make sure it is working.
    251. testVersion() {
    252.   set +e
    253.   HELM="$(command -v $BINARY_NAME)"
    254.   if [ "$?" = "1" ]; then
    255.     echo "$BINARY_NAME not found. Is $HELM_INSTALL_DIR on your "'$PATH?'
    256.     exit 1
    257.   fi
    258.   set -e
    259. }
    260.  
    261. # help provides possible cli installation arguments
    262. help () {
    263.   echo "Accepted cli arguments are:"
    264.   echo -e "\t[--help|-h ] ->> prints this help"
    265.   echo -e "\t[--version|-v <desired_version>] . When not defined it fetches the latest release from GitHub"
    266.   echo -e "\te.g. --version v3.0.0 or -v canary"
    267.   echo -e "\t[--no-sudo]  ->> install without sudo"
    268. }
    269.  
    270. # cleanup temporary files to avoid https://github.com/helm/helm/issues/2977
    271. cleanup() {
    272.   if [[ -d "${HELM_TMP_ROOT:-}" ]]; then
    273.     rm -rf "$HELM_TMP_ROOT"
    274.   fi
    275. }
    276.  
    277. # Execution
    278.  
    279. #Stop execution on any error
    280. trap "fail_trap" EXIT
    281. set -e
    282.  
    283. # Set debug if desired
    284. if [ "${DEBUG}" == "true" ]; then
    285.   set -x
    286. fi
    287.  
    288. # Parsing input arguments (if any)
    289. export INPUT_ARGUMENTS="${@}"
    290. set -u
    291. while [[ $# -gt 0 ]]; do
    292.   case $1 in
    293.     '--version'|-v)
    294.        shift
    295.        if [[ $# -ne 0 ]]; then
    296.            export DESIRED_VERSION="${1}"
    297.        else
    298.            echo -e "Please provide the desired version. e.g. --version v3.0.0 or -v canary"
    299.            exit 0
    300.        fi
    301.        ;;
    302.     '--no-sudo')
    303.        USE_SUDO="false"
    304.        ;;
    305.     '--help'|-h)
    306.        help
    307.        exit 0
    308.        ;;
    309.     *) exit 1
    310.        ;;
    311.   esac
    312.   shift
    313. done
    314. set +u
    315.  
    316. initArch
    317. initOS
    318. verifySupported
    319. checkDesiredVersion
    320. if ! checkHelmInstalledVersion; then
    321.   downloadFile
    322.   verifyFile
    323.   installFile
    324. fi
    325. testVersion
    326. cleanup

    三、入门使用

    1、三大概念

    • Chart 代表着 Helm 包。它包含在 Kubernetes 集群内部运行应用程序，工具或服务所需的所有资源定义。你可以把它看作是 Homebrew formula，Apt dpkg，或 Yum RPM 在Kubernetes 中的等价物。

    • Repository（仓库） 是用来存放和共享 charts 的地方。它就像 Perl 的CPAN 档案库网络或是 Fedora 的软件包仓库 ，只不过它是供 Kubernetes 包所使用的。

    • Release 是运行在 Kubernetes 集群中的 chart 的实例。一个 chart 通常可以在同一个集群中安装多次。每一次安装都会创建一个新的 release。以 MySQL chart为例，如果你想在你的集群中运行两个数据库，你可以安装该chart两次。每一个数据库都会拥有它自己的 release 和 release name。

    在了解了上述这些概念以后，我们就可以这样来解释 Helm：

    Helm 安装 charts 到 Kubernetes 集群中，每次安装都会创建一个新的 release。你可以在 Helm 的 chart repositories 中寻找新的 chart。

    1. helm pull bitnami/mysql
    2. helm install -f values.yaml mysqlhaha ./

    2、charts 结构

    3、应用安装

    4、自定义变量值

     5、命令

    1. helm install xx
    2. helm list
    3. helm status xx
    4. helm rollback xxx

    6、推送helm chart

    1. helm registry login --insecure 192.168.86.5
    2. helm chart save /root/mariadb 192.168.86.5/chart/mariadb:test
    3. helm chart push 192.168.86.5/chart/mariadb:test
    4. helm registry logout 192.168.86.5
    • 📢博客主页：https://lansonli.blog.csdn.net
    • 📢欢迎点赞 👍 收藏 ⭐留言 📝 如有错误敬请指正！
    • 📢本文由 Lansonli 原创，首发于 CSDN博客🙉
    • 📢停下休息的时候不要忘了别人还在奔跑，希望大家抓紧时间学习，全力奔赴更美好的生活✨
  • 相关阅读:
    【ShardingSphere】单实例模式创建分片表、广播表、单表
    蓝桥杯每日一题2023.11.6
    yii2，脚本内存溢出解决办法
    20. 如何使用 ABAP 代码消费需要传递 CSRF token 的 OData 服务
    筹备三年，自动驾驶L3标准将至，智驾产业链的关键一跃
    Vue2/3 项目中的 ESLint + Prettier 代码检测格式化风格指南
    原来大厂都是这样监控Tomcat性能的，废话不多说，直接开干
    csapp-Machine-Level Representation of Program-review
    vsftpd配置
    Linux ：远程访问的 16 个最佳工具（一）
  • 原文地址：https://blog.csdn.net/xiaoweite1/article/details/125477153