前提 nfs及class已经创建ok
cluster-mongo.yaml
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: mongo
spec:
selector:
matchLabels:
role: mongo
environment: test
serviceName: "mongo"
replicas: 3
template:
metadata:
labels:
role: mongo
environment: test
spec:
terminationGracePeriodSeconds: 10
containers:
- name: mongo
image: mongo:3.6.22
command:
- mongod
- "--replSet"
- rs0
- "--bind_ip"
- 0.0.0.0
- "--smallfiles"
- "--noprealloc"
ports:
- containerPort: 27017
volumeMounts:
- name: mongo-persistent-storage
mountPath: /data/db
- name: mongo-sidecar
image: cvallance/mongo-k8s-sidecar:latest
env:
- name: MONGO_SIDECAR_POD_LABELS
value: "role=mongo,environment=test"
volumeClaimTemplates:
- metadata:
name: mongo-persistent-storage
spec:
storageClassName: "cluster-mongo"
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 20Gi
---
apiVersion: v1
kind: Service
metadata:
name: mongo
labels:
name: mongo
spec:
ports:
- port: 27017
targetPort: 27017
clusterIP: None
selector:
role: mongo
---
apiVersion: v1
kind: Service
metadata:
name: mongo-cs
labels:
name: mongo
spec:
ports:
- port: 27017
targetPort: 27017
#nodePort访问
nodePort: 30717
selector:
role: mongo
type: NodePort
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: mongo-default-view
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: view
subjects:
- kind: ServiceAccount
name: default
namespace: default
验证
kubectl exec -it mongo-0 -- mongo
rs0:SECONDARY> rs.status()
{
"set": "rs0",
"date": ISODate("2022-10-06T07:58:25.67Z"),
"myState": NumberInt("2"),
"term": NumberLong("1"),
"syncingTo": "10.244.2.3:27017",
"syncSourceHost": "10.244.2.3:27017",
"syncSourceId": NumberInt("0"),
"heartbeatIntervalMillis": NumberLong("2000"),
"optimes": {
"lastCommittedOpTime": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"readConcernMajorityOpTime": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"appliedOpTime": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"durableOpTime": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
}
},
"members": [
{
"_id": NumberInt("0"),
"name": "10.244.2.3:27017",
"health": 1,
"state": NumberInt("1"),
"stateStr": "PRIMARY",
"uptime": NumberInt("1770"),
"optime": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"optimeDurable": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"optimeDate": ISODate("2022-10-06T07:58:24.000Z"),
"optimeDurableDate": ISODate("2022-10-06T07:58:24.000Z"),
"lastHeartbeat": ISODate("2022-10-06T07:58:24.576Z"),
"lastHeartbeatRecv": ISODate("2022-10-06T07:58:25.52Z"),
"pingMs": NumberLong("0"),
"lastHeartbeatMessage": "",
"syncingTo": "",
"syncSourceHost": "",
"syncSourceId": NumberInt("-1"),
"infoMessage": "",
"electionTime": Timestamp(1665041212, 2),
"electionDate": ISODate("2022-10-06T07:26:52.000Z"),
"configVersion": NumberInt("8")
},
{
"_id": NumberInt("1"),
"name": "10.244.1.3:27017",
"health": 1,
"state": NumberInt("2"),
"stateStr": "SECONDARY",
"uptime": NumberInt("1795"),
"optime": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"optimeDate": ISODate("2022-10-06T07:58:24.000Z"),
"syncingTo": "10.244.2.3:27017",
"syncSourceHost": "10.244.2.3:27017",
"syncSourceId": NumberInt("0"),
"infoMessage": "",
"configVersion": NumberInt("8"),
"self": true,
"lastHeartbeatMessage": ""
},
{
"_id": NumberInt("2"),
"name": "10.244.3.5:27017",
"health": 1,
"state": NumberInt("2"),
"stateStr": "SECONDARY",
"uptime": NumberInt("1679"),
"optime": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"optimeDurable": {
"ts": Timestamp(1665043104, 1),
"t": NumberLong("1")
},
"optimeDate": ISODate("2022-10-06T07:58:24.000Z"),
"optimeDurableDate": ISODate("2022-10-06T07:58:24.000Z"),
"lastHeartbeat": ISODate("2022-10-06T07:58:24.575Z"),
"lastHeartbeatRecv": ISODate("2022-10-06T07:58:24.657Z"),
"pingMs": NumberLong("0"),
"lastHeartbeatMessage": "",
"syncingTo": "10.244.2.3:27017",
"syncSourceHost": "10.244.2.3:27017",
"syncSourceId": NumberInt("0"),
"infoMessage": "",
"configVersion": NumberInt("8")
}
],
"ok": 1,
"operationTime": Timestamp(1665043104, 1),
"$clusterTime": {
"clusterTime": Timestamp(1665043104, 1),
"signature": {
"hash": BinData(0, "AAAAAAAAAAAAAAAAAAAAAAAAAAA="),
"keyId": NumberLong("0")
}
}
}
用户
rs0:PRIMARY> use admin #切换到admin数据库
switched to db admin
rs0:PRIMARY> db.createUser({user:"admin",pwd:"12300",roles:["root"]}) #创建用户名为admin、密码为password、角色为root的用户；
Successfully added user: { "user" : "admin", "roles" : [ "root" ] }
rs0:PRIMARY> db.getCollectionNames() #新增的用户在system.users；
[ "system.users", "system.version" ]
rs0:PRIMARY> db.auth("admin", "12300") #第一个用户添加完成后，便需要认证才能继续添加其他用户；
1
rs0:PRIMARY> use test; #创建test数据库；
switched to db test
rs0:PRIMARY> db.users.insertMany( [{ name: "bob", age: 42, status: "A", },{ name: "ahn", age: 22, status: "A", },{ name: "xi", age: 34, status: "D", }])
{
"acknowledged" : true,
"insertedIds" : [
ObjectId("61040bba1ce3378f75980aba"),
ObjectId("61040bba1ce3378f75980abb"),
ObjectId("61040bba1ce3378f75980abc")
]
}
rs0:PRIMARY> show collections; #查询集合
users
rs0:PRIMARY> db.users.find() #查询users集合中的数据；
{ "_id" : ObjectId("61040bba1ce3378f75980aba"), "name" : "bob", "age" : 42, "status" : "A" }
{ "_id" : ObjectId("61040bba1ce3378f75980abb"), "name" : "ahn", "age" : 22, "status" : "A" }
{ "_id" : ObjectId("61040bba1ce3378f75980abc"), "name" : "xi", "age" : 34, "status" : "D" }
# mongodb 创建普通用户
rs0:PRIMARY> use test
switched to db test
rs0:PRIMARY> db.createUser({user: "test", pwd: "123456", roles: [{ role: "dbOwner", db: "test" }]})
Successfully added user: {
"user" : "test",
"roles" : [
{
"role" : "dbOwner",
"db" : "test"
}
]
}
网友评论