feat: MySQL纳入K8s清单并开放NodePort
This commit is contained in:
admin
@@ -12,7 +12,12 @@ Kubernetes 部署清单，按环境隔离。
|
||||
│ ├── service-lpt-fe.yaml
|
||||
│ ├── service-lpt-be.yaml
|
||||
│ ├── service-lpt-ai.yaml
|
||||
│ └── configmap.yaml
|
||||
│ ├── configmap.yaml
|
||||
│ ├── mysql-deployment.yaml
|
||||
│ ├── mysql-service.yaml
|
||||
│ ├── mysql-storage.yaml
|
||||
│ ├── mysql-backup-cronjob.yaml
|
||||
│ └── lpt-logs-storage.yaml
|
||||
├── prod/
|
||||
│ ├── deployment-lpt-fe.yaml
|
||||
│ ├── deployment-lpt-be.yaml
|
||||
@@ -20,7 +25,12 @@ Kubernetes 部署清单，按环境隔离。
|
||||
│ ├── service-lpt-fe.yaml
|
||||
│ ├── service-lpt-be.yaml
|
||||
│ ├── service-lpt-ai.yaml
|
||||
│ └── configmap.yaml
|
||||
│ ├── configmap.yaml
|
||||
│ ├── mysql-deployment.yaml
|
||||
│ ├── mysql-service.yaml
|
||||
│ ├── mysql-storage.yaml
|
||||
│ ├── mysql-backup-cronjob.yaml
|
||||
│ └── lpt-logs-storage.yaml
|
||||
└── README.md
|
||||
```
|
||||
|
||||
@@ -65,6 +75,29 @@ kubectl apply -f dev/
|
||||
kubectl apply -f prod/
|
||||
```
|
||||
|
||||
`kubectl apply -f dev/` / `prod/` 会同时创建 MySQL 的 Service、PV/PVC、Deployment 和每日备份 CronJob。
|
||||
|
||||
## 数据库（MySQL）
|
||||
|
||||
MySQL 与业务服务一起由清单管理，每个 namespace 一个 `mysql` Deployment 和 NodePort Service（端口 3306），数据通过 hostPath PV/PVC 持久化。
|
||||
|
||||
| 项目 | dev | prod |
|
||||
|------|-----|------|
|
||||
| 镜像 | `mysql:9` | `mysql:8.0` |
|
||||
| 数据目录 | `/vol1/lpt/mysql/dev/data` | `/vol1/lpt/mysql/prod/data` |
|
||||
| 备份目录 | `/vol1/lpt/backup/dev` | `/vol1/lpt/backup/prod` |
|
||||
| 日志目录 | `/vol1/lpt/logs/dev` | `/vol1/lpt/logs/prod` |
|
||||
| 数据库 | `learning_progress_tracker` | `lpt_prod` |
|
||||
|
||||
- LPT 数据统一放在 `/vol1/lpt` 下：MySQL 数据、备份、lpt-ai 日志（挂载到容器 `/app/data`，持久化 `logs.json`）。
|
||||
- PV 使用 hostPath 并绑定节点 `cw8505fnos`；新环境需要同步修改 `mysql-storage.yaml` / `lpt-logs-storage.yaml` 中的路径和节点名。
|
||||
- dev 使用 `mysql:9`；若 Docker Hub 不可达，可先在本机 containerd 打标签：`ctr -n k8s.io images tag docker.io/library/mysql:latest docker.io/library/mysql:9`。
|
||||
- root 密码来自 Secret `lpt-secrets.mysql-root-password`，应用当前以 root 连接数据库。
|
||||
- 表结构由 lpt-be 启动时的 Flyway 自动迁移，不需要手工建表。
|
||||
- 每日 03:00 通过 `mysql-backup` CronJob 执行 mysqldump，备份保留 14 天。
|
||||
- 历史数据已从 `/vol1/1000/mysql`、`/vol1/1000/mysql-my/LPT/prod/data` 迁移到 `/vol1/lpt`，旧目录保留未删除；更换节点前先 dump 备份，再恢复到新路径。
|
||||
- 局域网维护：MySQL Service 已开放 NodePort，dev 为 `30306`，prod 为 `30307`；不需要对外访问时可改回 ClusterIP。
|
||||
|
||||
## 日常更新
|
||||
|
||||
```bash
|
||||
@@ -97,6 +130,7 @@ sudo docker exec traefik cat /etc/traefik/dynamic/k8s-lpt.yml
|
||||
| lpt-fe | 30080 | 30180 |
|
||||
| lpt-be (api) | 30082 | 30182 |
|
||||
| lpt-ai | ClusterIP | ClusterIP |
|
||||
| mysql | 30306 | 30307 |
|
||||
|
||||
## 验证
|
||||
```bash
|
||||
|
||||
@@ -77,3 +77,10 @@ spec:
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 3
|
||||
volumeMounts:
|
||||
- name: lpt-logs
|
||||
mountPath: /app/data
|
||||
volumes:
|
||||
- name: lpt-logs
|
||||
persistentVolumeClaim:
|
||||
claimName: lpt-logs
|
||||
|
||||
@@ -0,0 +1,41 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: lpt-dev-logs
|
||||
labels:
|
||||
app: lpt
|
||||
environment: dev
|
||||
spec:
|
||||
capacity:
|
||||
storage: 5Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: ""
|
||||
claimRef:
|
||||
namespace: lpt-dev
|
||||
name: lpt-logs
|
||||
hostPath:
|
||||
path: /vol1/lpt/logs/dev
|
||||
type: DirectoryOrCreate
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: kubernetes.io/hostname
|
||||
operator: In
|
||||
values:
|
||||
- cw8505fnos
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: lpt-logs
|
||||
namespace: lpt-dev
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: ""
|
||||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
@@ -0,0 +1,43 @@
|
||||
apiVersion: batch/v1
|
||||
kind: CronJob
|
||||
metadata:
|
||||
name: mysql-backup
|
||||
namespace: lpt-dev
|
||||
spec:
|
||||
schedule: "0 3 * * *"
|
||||
concurrencyPolicy: Forbid
|
||||
successfulJobsHistoryLimit: 7
|
||||
failedJobsHistoryLimit: 3
|
||||
jobTemplate:
|
||||
spec:
|
||||
backoffLimit: 2
|
||||
template:
|
||||
spec:
|
||||
restartPolicy: OnFailure
|
||||
containers:
|
||||
- name: mysqldump
|
||||
image: mysql:9
|
||||
imagePullPolicy: IfNotPresent
|
||||
command:
|
||||
- /bin/sh
|
||||
- -ec
|
||||
- |
|
||||
set -euo pipefail
|
||||
TS=$(date +%Y%m%d-%H%M%S)
|
||||
mysqldump --host=mysql --port=3306 --user=root --password="$MYSQL_ROOT_PASSWORD" \
|
||||
--all-databases --single-transaction --routines --events --triggers \
|
||||
> "/backup/lpt-dev-${TS}.sql"
|
||||
find /backup -type f -name 'lpt-dev-*.sql' -mtime +14 -delete
|
||||
env:
|
||||
- name: MYSQL_ROOT_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: lpt-secrets
|
||||
key: mysql-root-password
|
||||
volumeMounts:
|
||||
- name: backup
|
||||
mountPath: /backup
|
||||
volumes:
|
||||
- name: backup
|
||||
persistentVolumeClaim:
|
||||
claimName: mysql-backup
|
||||
@@ -0,0 +1,71 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: mysql
|
||||
namespace: lpt-dev
|
||||
labels:
|
||||
app: mysql
|
||||
spec:
|
||||
replicas: 1
|
||||
strategy:
|
||||
type: Recreate
|
||||
selector:
|
||||
matchLabels:
|
||||
app: mysql
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: mysql
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 30
|
||||
containers:
|
||||
- name: mysql
|
||||
image: mysql:9
|
||||
imagePullPolicy: IfNotPresent
|
||||
ports:
|
||||
- containerPort: 3306
|
||||
protocol: TCP
|
||||
env:
|
||||
- name: MYSQL_ROOT_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: lpt-secrets
|
||||
key: mysql-root-password
|
||||
- name: MYSQL_DATABASE
|
||||
value: learning_progress_tracker
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
cpu: "1"
|
||||
memory: 1Gi
|
||||
volumeMounts:
|
||||
- name: mysql-data
|
||||
mountPath: /var/lib/mysql
|
||||
livenessProbe:
|
||||
exec:
|
||||
command:
|
||||
- mysqladmin
|
||||
- ping
|
||||
- -h
|
||||
- localhost
|
||||
initialDelaySeconds: 120
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 10
|
||||
readinessProbe:
|
||||
exec:
|
||||
command:
|
||||
- mysqladmin
|
||||
- ping
|
||||
- -h
|
||||
- localhost
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 10
|
||||
volumes:
|
||||
- name: mysql-data
|
||||
persistentVolumeClaim:
|
||||
claimName: mysql-data
|
||||
@@ -0,0 +1,16 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: mysql
|
||||
namespace: lpt-dev
|
||||
labels:
|
||||
app: mysql
|
||||
spec:
|
||||
type: NodePort
|
||||
selector:
|
||||
app: mysql
|
||||
ports:
|
||||
- port: 3306
|
||||
targetPort: 3306
|
||||
protocol: TCP
|
||||
nodePort: 30306
|
||||
@@ -0,0 +1,83 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: mysql-dev-data
|
||||
labels:
|
||||
app: mysql
|
||||
environment: dev
|
||||
spec:
|
||||
capacity:
|
||||
storage: 10Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: ""
|
||||
claimRef:
|
||||
namespace: lpt-dev
|
||||
name: mysql-data
|
||||
hostPath:
|
||||
path: /vol1/lpt/mysql/dev/data
|
||||
type: Directory
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: kubernetes.io/hostname
|
||||
operator: In
|
||||
values:
|
||||
- cw8505fnos
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: mysql-data
|
||||
namespace: lpt-dev
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: ""
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: mysql-dev-backup
|
||||
labels:
|
||||
app: mysql
|
||||
environment: dev
|
||||
spec:
|
||||
capacity:
|
||||
storage: 10Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: ""
|
||||
claimRef:
|
||||
namespace: lpt-dev
|
||||
name: mysql-backup
|
||||
hostPath:
|
||||
path: /vol1/lpt/backup/dev
|
||||
type: DirectoryOrCreate
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: kubernetes.io/hostname
|
||||
operator: In
|
||||
values:
|
||||
- cw8505fnos
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: mysql-backup
|
||||
namespace: lpt-dev
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: ""
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
@@ -77,3 +77,10 @@ spec:
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 3
|
||||
volumeMounts:
|
||||
- name: lpt-logs
|
||||
mountPath: /app/data
|
||||
volumes:
|
||||
- name: lpt-logs
|
||||
persistentVolumeClaim:
|
||||
claimName: lpt-logs
|
||||
|
||||
@@ -0,0 +1,41 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: lpt-prod-logs
|
||||
labels:
|
||||
app: lpt
|
||||
environment: prod
|
||||
spec:
|
||||
capacity:
|
||||
storage: 5Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: ""
|
||||
claimRef:
|
||||
namespace: lpt-prod
|
||||
name: lpt-logs
|
||||
hostPath:
|
||||
path: /vol1/lpt/logs/prod
|
||||
type: DirectoryOrCreate
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: kubernetes.io/hostname
|
||||
operator: In
|
||||
values:
|
||||
- cw8505fnos
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: lpt-logs
|
||||
namespace: lpt-prod
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: ""
|
||||
resources:
|
||||
requests:
|
||||
storage: 5Gi
|
||||
@@ -0,0 +1,43 @@
|
||||
apiVersion: batch/v1
|
||||
kind: CronJob
|
||||
metadata:
|
||||
name: mysql-backup
|
||||
namespace: lpt-prod
|
||||
spec:
|
||||
schedule: "0 3 * * *"
|
||||
concurrencyPolicy: Forbid
|
||||
successfulJobsHistoryLimit: 7
|
||||
failedJobsHistoryLimit: 3
|
||||
jobTemplate:
|
||||
spec:
|
||||
backoffLimit: 2
|
||||
template:
|
||||
spec:
|
||||
restartPolicy: OnFailure
|
||||
containers:
|
||||
- name: mysqldump
|
||||
image: mysql:8.0
|
||||
imagePullPolicy: IfNotPresent
|
||||
command:
|
||||
- /bin/sh
|
||||
- -ec
|
||||
- |
|
||||
set -euo pipefail
|
||||
TS=$(date +%Y%m%d-%H%M%S)
|
||||
mysqldump --host=mysql --port=3306 --user=root --password="$MYSQL_ROOT_PASSWORD" \
|
||||
--all-databases --single-transaction --routines --events --triggers \
|
||||
> "/backup/lpt-prod-${TS}.sql"
|
||||
find /backup -type f -name 'lpt-prod-*.sql' -mtime +14 -delete
|
||||
env:
|
||||
- name: MYSQL_ROOT_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: lpt-secrets
|
||||
key: mysql-root-password
|
||||
volumeMounts:
|
||||
- name: backup
|
||||
mountPath: /backup
|
||||
volumes:
|
||||
- name: backup
|
||||
persistentVolumeClaim:
|
||||
claimName: mysql-backup
|
||||
@@ -0,0 +1,71 @@
|
||||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: mysql
|
||||
namespace: lpt-prod
|
||||
labels:
|
||||
app: mysql
|
||||
spec:
|
||||
replicas: 1
|
||||
strategy:
|
||||
type: Recreate
|
||||
selector:
|
||||
matchLabels:
|
||||
app: mysql
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
app: mysql
|
||||
spec:
|
||||
terminationGracePeriodSeconds: 30
|
||||
containers:
|
||||
- name: mysql
|
||||
image: mysql:8.0
|
||||
imagePullPolicy: IfNotPresent
|
||||
ports:
|
||||
- containerPort: 3306
|
||||
protocol: TCP
|
||||
env:
|
||||
- name: MYSQL_ROOT_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: lpt-secrets
|
||||
key: mysql-root-password
|
||||
- name: MYSQL_DATABASE
|
||||
value: lpt_prod
|
||||
resources:
|
||||
requests:
|
||||
cpu: 250m
|
||||
memory: 512Mi
|
||||
limits:
|
||||
cpu: "1"
|
||||
memory: 1Gi
|
||||
volumeMounts:
|
||||
- name: mysql-data
|
||||
mountPath: /var/lib/mysql
|
||||
livenessProbe:
|
||||
exec:
|
||||
command:
|
||||
- mysqladmin
|
||||
- ping
|
||||
- -h
|
||||
- localhost
|
||||
initialDelaySeconds: 120
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 10
|
||||
readinessProbe:
|
||||
exec:
|
||||
command:
|
||||
- mysqladmin
|
||||
- ping
|
||||
- -h
|
||||
- localhost
|
||||
initialDelaySeconds: 60
|
||||
periodSeconds: 5
|
||||
timeoutSeconds: 3
|
||||
failureThreshold: 10
|
||||
volumes:
|
||||
- name: mysql-data
|
||||
persistentVolumeClaim:
|
||||
claimName: mysql-data
|
||||
@@ -0,0 +1,16 @@
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: mysql
|
||||
namespace: lpt-prod
|
||||
labels:
|
||||
app: mysql
|
||||
spec:
|
||||
type: NodePort
|
||||
selector:
|
||||
app: mysql
|
||||
ports:
|
||||
- port: 3306
|
||||
targetPort: 3306
|
||||
protocol: TCP
|
||||
nodePort: 30307
|
||||
@@ -0,0 +1,83 @@
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: mysql-prod-data
|
||||
labels:
|
||||
app: mysql
|
||||
environment: prod
|
||||
spec:
|
||||
capacity:
|
||||
storage: 10Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: ""
|
||||
claimRef:
|
||||
namespace: lpt-prod
|
||||
name: mysql-data
|
||||
hostPath:
|
||||
path: /vol1/lpt/mysql/prod/data
|
||||
type: Directory
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: kubernetes.io/hostname
|
||||
operator: In
|
||||
values:
|
||||
- cw8505fnos
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: mysql-data
|
||||
namespace: lpt-prod
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: ""
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolume
|
||||
metadata:
|
||||
name: mysql-prod-backup
|
||||
labels:
|
||||
app: mysql
|
||||
environment: prod
|
||||
spec:
|
||||
capacity:
|
||||
storage: 10Gi
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
persistentVolumeReclaimPolicy: Retain
|
||||
storageClassName: ""
|
||||
claimRef:
|
||||
namespace: lpt-prod
|
||||
name: mysql-backup
|
||||
hostPath:
|
||||
path: /vol1/lpt/backup/prod
|
||||
type: DirectoryOrCreate
|
||||
nodeAffinity:
|
||||
required:
|
||||
nodeSelectorTerms:
|
||||
- matchExpressions:
|
||||
- key: kubernetes.io/hostname
|
||||
operator: In
|
||||
values:
|
||||
- cw8505fnos
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: PersistentVolumeClaim
|
||||
metadata:
|
||||
name: mysql-backup
|
||||
namespace: lpt-prod
|
||||
spec:
|
||||
accessModes:
|
||||
- ReadWriteOnce
|
||||
storageClassName: ""
|
||||
resources:
|
||||
requests:
|
||||
storage: 10Gi
|
||||
Reference in New Issue
Block a user