{"@attributes":{"version":"2.0"},"channel":{"title":"Cloud Native Cookbook","link":"https:\/\/cloudnative.lei6393.com\/","description":"Recent content on Cloud Native Cookbook","generator":"Hugo","language":"zh","copyright":"Copyright (c) 2024-2025 Cloud Native Cookbook","lastBuildDate":"Thu, 12 Feb 2026 09:28:11 +0800","item":[{"title":"API Server \u542f\u52a8\u6d41\u7a0b","link":"https:\/\/cloudnative.lei6393.com\/kubernetes\/03-apiserver\/01-startup\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/kubernetes\/03-apiserver\/01-startup\/","description":"

\u672c\u6587\u6df1\u5165\u5206\u6790 kube-apiserver \u7684\u542f\u52a8\u6d41\u7a0b\uff0c\u5305\u62ec\u547d\u4ee4\u89e3\u6790\u3001\u914d\u7f6e\u6784\u5efa\u3001\u7ec4\u4ef6\u521d\u59cb\u5316\u548c\u670d\u52a1\u542f\u52a8\u7b49\u5173\u952e\u9636\u6bb5\u3002<\/p>\n

1. \u5165\u53e3\u4e0e\u547d\u4ee4\u89e3\u6790<\/h2>\n

1.1 main \u5165\u53e3<\/h3>\n

API Server \u7684\u5165\u53e3\u4f4d\u4e8e cmd\/kube-apiserver\/apiserver.go<\/code>\uff1a<\/p>\n\n\n\n

\n
\n
\n <\/span>\n <\/figcaption>\n 
\/\/ cmd\/kube-apiserver\/apiserver.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> main<\/span>()<\/span> {<\/span>\n<\/span><\/span> command<\/span> :=<\/span> app<\/span>.<\/span>NewAPIServerCommand<\/span>()<\/span>\n<\/span><\/span> code<\/span> :=<\/span> cli<\/span>.<\/span>Run<\/span>(<\/span>command<\/span>)<\/span>\n<\/span><\/span> os<\/span>.<\/span>Exit<\/span>(<\/span>code<\/span>)<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
1.2 Cobra \u547d\u4ee4\u6846\u67b6<\/h3>\n
API Server \u4f7f\u7528 Cobra \u6846\u67b6\u5904\u7406\u547d\u4ee4\u884c\u53c2\u6570\uff1a<\/p>"},{"title":"API \u4e0e\u6570\u636e\u5b58\u50a8","link":"https:\/\/cloudnative.lei6393.com\/calico\/03-calico-control-plane\/01-api-and-datastore\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/calico\/03-calico-control-plane\/01-api-and-datastore\/","description":"
\u6982\u8ff0<\/h2>\n
Calico \u4f7f\u7528 Kubernetes \u98ce\u683c\u7684 API \u6765\u7ba1\u7406\u7f51\u7edc\u914d\u7f6e\u548c\u7b56\u7565\u3002\u672c\u7ae0\u4ecb\u7ecd Calico \u7684 API \u8d44\u6e90\u7c7b\u578b\u3001CRD \u5b9a\u4e49\u3001\u6570\u636e\u5b58\u50a8\u62bd\u8c61\u5c42\uff0c\u4ee5\u53ca libcalico-go \u5ba2\u6237\u7aef\u5e93\u7684\u4f7f\u7528\u3002<\/p>\n
\u524d\u7f6e\u77e5\u8bc6<\/h2>\n
    \n
  • Kubernetes API \u548c CRD \u57fa\u7840<\/li>\n
  • Go \u8bed\u8a00\u57fa\u7840<\/li>\n
  • etcd \u57fa\u7840\uff08\u53ef\u9009\uff09<\/li>\n<\/ul>\n
    Calico API \u8d44\u6e90\u7c7b\u578b<\/h2>\n
    \u8d44\u6e90\u5206\u7c7b<\/h3>\n
    graph TB\n subgraph resources[\"Calico API \u8d44\u6e90\"]\n subgraph network[\"\u7f51\u7edc\u8d44\u6e90\"]\n IPPOOL[\"IPPoolIP \u5730\u5740\u6c60\"]\n IPRESERV[\"IPReservationIP \u9884\u7559\"]\n BGP_CONF[\"BGPConfigurationBGP \u5168\u5c40\u914d\u7f6e\"]\n BGP_PEER[\"BGPPeerBGP \u5bf9\u7b49\u4f53\"]\n end\n\n subgraph policy[\"\u7b56\u7565\u8d44\u6e90\"]\n NP[\"NetworkPolicy\u547d\u540d\u7a7a\u95f4\u7b56\u7565\"]\n GNP[\"GlobalNetworkPolicy\u5168\u5c40\u7b56\u7565\"]\n TIER[\"Tier\u7b56\u7565\u5c42\"]\n PROFILE[\"Profile\u7aef\u70b9\u914d\u7f6e\u6587\u4ef6\"]\n NSS[\"NetworkSetIP \u96c6\u5408\"]\n GNSS[\"GlobalNetworkSet\u5168\u5c40 IP \u96c6\u5408\"]\n end\n\n subgraph endpoint[\"\u7aef\u70b9\u8d44\u6e90\"]\n WEP[\"WorkloadEndpoint\u5de5\u4f5c\u8d1f\u8f7d\u7aef\u70b9\"]\n HEP[\"HostEndpoint\u4e3b\u673a\u7aef\u70b9\"]\n end\n\n subgraph node_res[\"\u8282\u70b9\u8d44\u6e90\"]\n NODE[\"NodeCalico \u8282\u70b9\"]\n FELIX_CONF[\"FelixConfigurationFelix \u914d\u7f6e\"]\n end\n end\n<\/div>\n\n
    \u6838\u5fc3\u8d44\u6e90\u8be6\u89e3<\/h3>\n\n \n \n \n \n \n \n \n \n \n \n \n \n 
    \u8d44\u6e90<\/th>\n \u4f5c\u7528\u57df<\/th>\n \u8bf4\u660e<\/th>\n <\/tr>\n <\/thead>\n 
    IPPool<\/strong><\/td>\n Global<\/td>\n \u5b9a\u4e49 Pod IP \u5730\u5740\u8303\u56f4<\/td>\n <\/tr>\n 
    NetworkPolicy<\/strong><\/td>\n Namespaced<\/td>\n \u547d\u540d\u7a7a\u95f4\u7ea7\u7f51\u7edc\u7b56\u7565<\/td>\n <\/tr>\n 
    GlobalNetworkPolicy<\/strong><\/td>\n Global<\/td>\n \u96c6\u7fa4\u7ea7\u7f51\u7edc\u7b56\u7565<\/td>\n <\/tr>\n 
    WorkloadEndpoint<\/strong><\/td>\n Namespaced<\/td>\n Pod \u7f51\u7edc\u7aef\u70b9\u4fe1\u606f<\/td>\n <\/tr>\n 
    HostEndpoint<\/strong><\/td>\n Global<\/td>\n \u4e3b\u673a\u7f51\u7edc\u7aef\u70b9<\/td>\n <\/tr>\n 
    BGPPeer<\/strong><\/td>\n Global<\/td>\n BGP \u90bb\u5c45\u914d\u7f6e<\/td>\n <\/tr>\n 
    BGPConfiguration<\/strong><\/td>\n Global<\/td>\n BGP \u5168\u5c40\u8bbe\u7f6e<\/td>\n <\/tr>\n 
    FelixConfiguration<\/strong><\/td>\n Global<\/td>\n Felix \u914d\u7f6e<\/td>\n <\/tr>\n 
    Node<\/strong><\/td>\n Global<\/td>\n Calico \u8282\u70b9\u4fe1\u606f<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
    CRD \u5b9a\u4e49<\/h2>\n
    \u4ee3\u7801\u4f4d\u7f6e<\/h3>\n\n\n\n
    \n 
    \n 
    \n <\/span>\n <\/figcaption>\n 
    api\/\n\u251c\u2500\u2500 pkg\/\n\u2502 \u251c\u2500\u2500 apis\/\n\u2502 \u2502 \u2514\u2500\u2500 projectcalico\/\n\u2502 \u2502 \u2514\u2500\u2500 v3\/ # API \u7c7b\u578b\u5b9a\u4e49\n\u2502 \u2502 \u251c\u2500\u2500 bgpconfig.go\n\u2502 \u2502 \u251c\u2500\u2500 bgppeer.go\n\u2502 \u2502 \u251c\u2500\u2500 felixconfig.go\n\u2502 \u2502 \u251c\u2500\u2500 ippool.go\n\u2502 \u2502 \u251c\u2500\u2500 networkpolicy.go\n\u2502 \u2502 \u251c\u2500\u2500 globalnetworkpolicy.go\n\u2502 \u2502 \u251c\u2500\u2500 profile.go\n\u2502 \u2502 \u251c\u2500\u2500 workloadendpoint.go\n\u2502 \u2502 \u2514\u2500\u2500 ...\n\u2502 \u2514\u2500\u2500 lib\/\n\u2502 \u2514\u2500\u2500 numorstring\/ # \u7aef\u53e3\u8303\u56f4\u7b49\u7c7b\u578b\n\u2514\u2500\u2500 go.mod<\/code><\/pre>\n <\/figure>\n<\/div>\n
    IPPool \u793a\u4f8b<\/h3>\n
    \u6587\u4ef6<\/strong>: api\/pkg\/apis\/projectcalico\/v3\/ippool.go<\/code><\/p>"},{"title":"BIRD \u4e0e confd","link":"https:\/\/cloudnative.lei6393.com\/calico\/06-bgp-networking\/01-bird-and-confd\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/calico\/06-bgp-networking\/01-bird-and-confd\/","description":"
    \u6982\u8ff0<\/h2>\n
    Calico \u4f7f\u7528 BIRD\uff08BIRD Internet Routing Daemon\uff09\u4f5c\u4e3a BGP \u8def\u7531\u5b88\u62a4\u8fdb\u7a0b\uff0c\u901a\u8fc7 confd \u52a8\u6001\u751f\u6210 BIRD \u914d\u7f6e\u3002\u672c\u6587\u6df1\u5165\u5206\u6790 BIRD \u7684\u914d\u7f6e\u7ed3\u6784\u3001confd \u7684\u6a21\u677f\u6e32\u67d3\u673a\u5236\u4ee5\u53ca\u914d\u7f6e\u70ed\u66f4\u65b0\u6d41\u7a0b\u3002<\/p>\n
    \u524d\u7f6e\u77e5\u8bc6<\/h2>\n
      \n
    • BGP \u534f\u8bae\u57fa\u7840<\/li>\n
    • Calico \u67b6\u6784\u6982\u89c8<\/li>\n
    • Go template \u8bed\u6cd5<\/li>\n<\/ul>\n
      \u67b6\u6784\u603b\u89c8<\/h2>\n
      flowchart TB\n subgraph datastore[\"\u6570\u636e\u5b58\u50a8\"]\n BGPCONFIG[\"BGPConfiguration\"]\n BGPPEER[\"BGPPeer\"]\n NODE[\"Node\"]\n end\n\n subgraph confd[\"confd\"]\n CLIENT[\"Calico ClientWatch \u8d44\u6e90\u53d8\u66f4\"]\n BGP_PROC[\"BGP Processor\u5904\u7406 BGP \u914d\u7f6e\"]\n TEMPLATE[\"Template Processor\u6e32\u67d3\u6a21\u677f\"]\n end\n\n subgraph output[\"\u8f93\u51fa\"]\n BIRD_CFG[\"bird.cfgbird6.cfg\"]\n BIRD[\"BIRD Daemon\"]\n end\n\n BGPCONFIG --> CLIENT\n BGPPEER --> CLIENT\n NODE --> CLIENT\n\n CLIENT --> BGP_PROC\n BGP_PROC --> TEMPLATE\n TEMPLATE --> BIRD_CFG\n BIRD_CFG -->|\"SIGHUP\"| BIRD\n<\/div>\n\n
      BIRD \u7b80\u4ecb<\/h2>\n
      \u4ec0\u4e48\u662f BIRD<\/h3>\n
      BIRD \u662f\u4e00\u4e2a\u5f00\u6e90\u7684\u8def\u7531\u5b88\u62a4\u8fdb\u7a0b\uff0c\u652f\u6301\u591a\u79cd\u8def\u7531\u534f\u8bae\uff1a<\/p>"},{"title":"Calico \u7b56\u7565\u6a21\u578b","link":"https:\/\/cloudnative.lei6393.com\/calico\/05-policy-enforcement\/01-policy-model\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/calico\/05-policy-enforcement\/01-policy-model\/","description":"
      \u6982\u8ff0<\/h2>\n
      Calico \u63d0\u4f9b\u4e86\u5f3a\u5927\u800c\u7075\u6d3b\u7684\u7f51\u7edc\u7b56\u7565\u6a21\u578b\uff0c\u652f\u6301 Kubernetes \u539f\u751f NetworkPolicy \u4ee5\u53ca Calico \u6269\u5c55\u7684 NetworkPolicy \u548c GlobalNetworkPolicy\u3002\u672c\u6587\u6df1\u5165\u5206\u6790 Calico \u7b56\u7565\u7684\u6570\u636e\u6a21\u578b\u3001\u5c42\u7ea7\u7ed3\u6784\u3001\u89c4\u5219\u8bed\u4e49\u4ee5\u53ca\u4e0e Kubernetes NetworkPolicy \u7684\u5173\u7cfb\u3002<\/p>\n
      \u524d\u7f6e\u77e5\u8bc6<\/h2>\n
        \n
      • Kubernetes NetworkPolicy \u57fa\u7840<\/li>\n
      • Calico \u67b6\u6784\u7ec4\u4ef6\uff08Felix\u3001kube-controllers\uff09<\/li>\n
      • \u6807\u7b7e\u9009\u62e9\u5668\u8bed\u6cd5<\/li>\n<\/ul>\n
        \u7b56\u7565\u7c7b\u578b\u603b\u89c8<\/h2>\n
        \u7b56\u7565\u5c42\u7ea7\u7ed3\u6784<\/h3>\n
        graph TB\n subgraph tier1[\"Tier - \u7b56\u7565\u5206\u5c42\"]\n T1[\"kube-adminOrder: 1,000\"]\n T2[\"defaultOrder: 1,000,000\"]\n T3[\"kube-baselineOrder: 10,000,000\"]\n end\n\n subgraph policies[\"\u7b56\u7565\u7c7b\u578b\"]\n GNP[\"GlobalNetworkPolicy\u96c6\u7fa4\u8303\u56f4\"]\n NP[\"NetworkPolicy\u547d\u540d\u7a7a\u95f4\u8303\u56f4\"]\n KNP[\"K8s NetworkPolicy\u8f6c\u6362\u4e3a Calico NP\"]\n PROF[\"Profile\u57fa\u4e8e NS\/SA \u7684\u9ed8\u8ba4\u89c4\u5219\"]\n end\n\n T1 --> GNP\n T2 --> NP\n T2 --> KNP\n T3 --> PROF\n\n style tier1 fill:#e1f5fe\n style policies fill:#fff3e0\n<\/div>\n\n
        \u7b56\u7565\u8d44\u6e90\u5bf9\u6bd4<\/h3>\n\n \n \n \n \n \n \n \n \n \n \n \n \n 
        \u7279\u6027<\/th>\n K8s NetworkPolicy<\/th>\n Calico NetworkPolicy<\/th>\n GlobalNetworkPolicy<\/th>\n <\/tr>\n <\/thead>\n 
        \u4f5c\u7528\u8303\u56f4<\/td>\n Namespace<\/td>\n Namespace<\/td>\n \u96c6\u7fa4<\/td>\n <\/tr>\n 
        Tier \u652f\u6301<\/td>\n \u56fa\u5b9a default<\/td>\n \u53ef\u914d\u7f6e<\/td>\n \u53ef\u914d\u7f6e<\/td>\n <\/tr>\n 
        Order \u63a7\u5236<\/td>\n \u65e0<\/td>\n \u652f\u6301<\/td>\n \u652f\u6301<\/td>\n <\/tr>\n 
        DoNotTrack<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u652f\u6301<\/td>\n <\/tr>\n 
        PreDNAT<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u652f\u6301<\/td>\n <\/tr>\n 
        ApplyOnForward<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u652f\u6301<\/td>\n <\/tr>\n 
        \u4e3b\u673a\u7aef\u70b9<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u652f\u6301<\/td>\n <\/tr>\n 
        \u670d\u52a1\u8d26\u6237\u9009\u62e9\u5668<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u652f\u6301<\/td>\n \u652f\u6301<\/td>\n <\/tr>\n 
        HTTP \u89c4\u5219<\/td>\n \u4e0d\u652f\u6301<\/td>\n \u652f\u6301<\/td>\n \u652f\u6301<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
        \u6838\u5fc3\u6570\u636e\u7ed3\u6784<\/h2>\n
        Rule \u7ed3\u6784<\/h3>\n
        Rule \u662f\u7b56\u7565\u7684\u6838\u5fc3\u5355\u5143\uff0c\u5b9a\u4e49\u4e86\u5339\u914d\u6761\u4ef6\u548c\u52a8\u4f5c\uff1a<\/p>"},{"title":"client-go \u67b6\u6784\u6982\u89c8","link":"https:\/\/cloudnative.lei6393.com\/kubernetes\/12-client-go\/01-overview\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/kubernetes\/12-client-go\/01-overview\/","description":"
        \u6982\u8ff0<\/h2>\n
        client-go \u662f Kubernetes \u5b98\u65b9\u63d0\u4f9b\u7684 Go \u8bed\u8a00\u5ba2\u6237\u7aef\u5e93\uff0c\u7528\u4e8e\u4e0e Kubernetes API Server \u8fdb\u884c\u4ea4\u4e92\u3002\u5b83\u662f\u5f00\u53d1 Kubernetes \u63a7\u5236\u5668\u3001Operator \u548c\u5404\u79cd\u96c6\u6210\u5de5\u5177\u7684\u57fa\u7840\u3002\u672c\u7ae0\u4ecb\u7ecd client-go \u7684\u6574\u4f53\u67b6\u6784\u548c\u6838\u5fc3\u7ec4\u4ef6\u3002<\/p>\n
        \u6574\u4f53\u67b6\u6784<\/h2>\n
        \u7ec4\u4ef6\u7ed3\u6784<\/h3>\n
        graph TB\n subgraph client_go[\"client-go\"]\n subgraph clients[\"\u5ba2\u6237\u7aef\u5c42\"]\n REST[\"RESTClient\"]\n Clientset[\"Clientset\"]\n Dynamic[\"DynamicClient\"]\n Discovery[\"DiscoveryClient\"]\n end\n\n subgraph informers[\"Informer \u5c42\"]\n SharedInformer[\"SharedInformerFactory\"]\n Informer[\"Informer\"]\n Lister[\"Lister\"]\n end\n\n subgraph tools[\"\u5de5\u5177\u5c42\"]\n Reflector[\"Reflector\"]\n DeltaFIFO[\"DeltaFIFO\"]\n Indexer[\"Indexer\"]\n WorkQueue[\"WorkQueue\"]\n end\n\n subgraph utilities[\"\u8f85\u52a9\u5de5\u5177\"]\n LeaderElection[\"Leader Election\"]\n Record[\"Event Recorder\"]\n Retry[\"Retry Utilities\"]\n end\n end\n\n subgraph apiserver[\"API Server\"]\n API[\"Kubernetes API\"]\n end\n\n REST --> API\n Clientset --> REST\n Dynamic --> REST\n Discovery --> REST\n SharedInformer --> Informer\n Informer --> Lister\n Informer --> Reflector\n Reflector --> DeltaFIFO\n DeltaFIFO --> Indexer\n<\/div>\n\n
        \u4ee3\u7801\u76ee\u5f55\u7ed3\u6784<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        staging\/src\/k8s.io\/client-go\/\n\u251c\u2500\u2500 discovery\/ # \u8d44\u6e90\u53d1\u73b0\u5ba2\u6237\u7aef\n\u251c\u2500\u2500 dynamic\/ # \u52a8\u6001\u5ba2\u6237\u7aef\n\u251c\u2500\u2500 informers\/ # SharedInformerFactory\n\u251c\u2500\u2500 kubernetes\/ # \u7c7b\u578b\u5316 Clientset\n\u251c\u2500\u2500 listers\/ # Lister \u63a5\u53e3\n\u251c\u2500\u2500 plugin\/ # \u8ba4\u8bc1\u63d2\u4ef6\n\u251c\u2500\u2500 rest\/ # REST \u5ba2\u6237\u7aef\n\u251c\u2500\u2500 scale\/ # Scale \u5ba2\u6237\u7aef\n\u251c\u2500\u2500 tools\/\n\u2502 \u251c\u2500\u2500 cache\/ # Informer\u3001Reflector\u3001DeltaFIFO\n\u2502 \u251c\u2500\u2500 clientcmd\/ # kubeconfig \u5904\u7406\n\u2502 \u251c\u2500\u2500 leaderelection\/# Leader \u9009\u4e3e\n\u2502 \u251c\u2500\u2500 record\/ # \u4e8b\u4ef6\u8bb0\u5f55\n\u2502 \u2514\u2500\u2500 watch\/ # Watch \u5de5\u5177\n\u251c\u2500\u2500 transport\/ # HTTP \u4f20\u8f93\u5c42\n\u2514\u2500\u2500 util\/\n \u251c\u2500\u2500 retry\/ # \u91cd\u8bd5\u5de5\u5177\n \u2514\u2500\u2500 workqueue\/ # \u5de5\u4f5c\u961f\u5217<\/code><\/pre>\n <\/figure>\n<\/div>\n
        \u5ba2\u6237\u7aef\u7c7b\u578b<\/h2>\n
        RESTClient<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ RESTClient \u662f\u6700\u5e95\u5c42\u7684\u5ba2\u6237\u7aef<\/span>\n<\/span><\/span>\/\/ \u76f4\u63a5\u4e0e API Server \u8fdb\u884c HTTP \u4ea4\u4e92<\/span>\n<\/span><\/span>\n<\/span><\/span>import<\/span> "k8s.io\/client-go\/rest"<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u521b\u5efa RESTClient<\/span>\n<\/span><\/span>config<\/span>,<\/span> err<\/span> :=<\/span> rest<\/span>.<\/span>InClusterConfig<\/span>()<\/span>\n<\/span><\/span>if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> panic<\/span>(<\/span>err<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u8bbe\u7f6e API \u8def\u5f84<\/span>\n<\/span><\/span>config<\/span>.<\/span>APIPath<\/span> =<\/span> "\/api"<\/span>\n<\/span><\/span>config<\/span>.<\/span>GroupVersion<\/span> =<\/span> &<\/span>v1<\/span>.<\/span>SchemeGroupVersion<\/span>\n<\/span><\/span>config<\/span>.<\/span>NegotiatedSerializer<\/span> =<\/span> scheme<\/span>.<\/span>Codecs<\/span>\n<\/span><\/span>\n<\/span><\/span>restClient<\/span>,<\/span> err<\/span> :=<\/span> rest<\/span>.<\/span>RESTClientFor<\/span>(<\/span>config<\/span>)<\/span>\n<\/span><\/span>if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> panic<\/span>(<\/span>err<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u53d1\u9001\u8bf7\u6c42<\/span>\n<\/span><\/span>result<\/span> :=<\/span> &<\/span>v1<\/span>.<\/span>PodList<\/span>{}<\/span>\n<\/span><\/span>err<\/span> =<\/span> restClient<\/span>.<\/span>Get<\/span>().<\/span>\n<\/span><\/span> Namespace<\/span>(<\/span>"default"<\/span>).<\/span>\n<\/span><\/span> Resource<\/span>(<\/span>"pods"<\/span>).<\/span>\n<\/span><\/span> Do<\/span>(<\/span>context<\/span>.<\/span>TODO<\/span>()).<\/span>\n<\/span><\/span> Into<\/span>(<\/span>result<\/span>)<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        Clientset<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ Clientset \u662f\u7c7b\u578b\u5316\u5ba2\u6237\u7aef<\/span>\n<\/span><\/span>\/\/ \u63d0\u4f9b\u6240\u6709\u5185\u7f6e\u8d44\u6e90\u7684\u7c7b\u578b\u5b89\u5168\u8bbf\u95ee<\/span>\n<\/span><\/span>\n<\/span><\/span>import<\/span> "k8s.io\/client-go\/kubernetes"<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u521b\u5efa Clientset<\/span>\n<\/span><\/span>clientset<\/span>,<\/span> err<\/span> :=<\/span> kubernetes<\/span>.<\/span>NewForConfig<\/span>(<\/span>config<\/span>)<\/span>\n<\/span><\/span>if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> panic<\/span>(<\/span>err<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u8bbf\u95ee\u6838\u5fc3 API<\/span>\n<\/span><\/span>pods<\/span>,<\/span> err<\/span> :=<\/span> clientset<\/span>.<\/span>CoreV1<\/span>().<\/span>Pods<\/span>(<\/span>"default"<\/span>).<\/span>List<\/span>(<\/span>context<\/span>.<\/span>TODO<\/span>(),<\/span> metav1<\/span>.<\/span>ListOptions<\/span>{})<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u8bbf\u95ee apps API<\/span>\n<\/span><\/span>deployments<\/span>,<\/span> err<\/span> :=<\/span> clientset<\/span>.<\/span>AppsV1<\/span>().<\/span>Deployments<\/span>(<\/span>"default"<\/span>).<\/span>List<\/span>(<\/span>context<\/span>.<\/span>TODO<\/span>(),<\/span> metav1<\/span>.<\/span>ListOptions<\/span>{})<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u8bbf\u95ee batch API<\/span>\n<\/span><\/span>jobs<\/span>,<\/span> err<\/span> :=<\/span> clientset<\/span>.<\/span>BatchV1<\/span>().<\/span>Jobs<\/span>(<\/span>"default"<\/span>).<\/span>List<\/span>(<\/span>context<\/span>.<\/span>TODO<\/span>(),<\/span> metav1<\/span>.<\/span>ListOptions<\/span>{})<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        DynamicClient<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ DynamicClient \u662f\u975e\u7c7b\u578b\u5316\u5ba2\u6237\u7aef<\/span>\n<\/span><\/span>\/\/ \u7528\u4e8e\u8bbf\u95ee\u4efb\u610f\u8d44\u6e90\uff08\u5305\u62ec CRD\uff09<\/span>\n<\/span><\/span>\n<\/span><\/span>import<\/span> (<\/span>\n<\/span><\/span> "k8s.io\/client-go\/dynamic"<\/span>\n<\/span><\/span> "k8s.io\/apimachinery\/pkg\/runtime\/schema"<\/span>\n<\/span><\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u521b\u5efa DynamicClient<\/span>\n<\/span><\/span>dynamicClient<\/span>,<\/span> err<\/span> :=<\/span> dynamic<\/span>.<\/span>NewForConfig<\/span>(<\/span>config<\/span>)<\/span>\n<\/span><\/span>if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> panic<\/span>(<\/span>err<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u5b9a\u4e49 GVR<\/span>\n<\/span><\/span>gvr<\/span> :=<\/span> schema<\/span>.<\/span>GroupVersionResource<\/span>{<\/span>\n<\/span><\/span> Group<\/span>:<\/span> "apps"<\/span>,<\/span>\n<\/span><\/span> Version<\/span>:<\/span> "v1"<\/span>,<\/span>\n<\/span><\/span> Resource<\/span>:<\/span> "deployments"<\/span>,<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u83b7\u53d6\u8d44\u6e90<\/span>\n<\/span><\/span>unstructuredList<\/span>,<\/span> err<\/span> :=<\/span> dynamicClient<\/span>.<\/span>Resource<\/span>(<\/span>gvr<\/span>).<\/span>\n<\/span><\/span> Namespace<\/span>(<\/span>"default"<\/span>).<\/span>\n<\/span><\/span> List<\/span>(<\/span>context<\/span>.<\/span>TODO<\/span>(),<\/span> metav1<\/span>.<\/span>ListOptions<\/span>{})<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        DiscoveryClient<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ DiscoveryClient \u7528\u4e8e\u53d1\u73b0 API \u8d44\u6e90<\/span>\n<\/span><\/span>\n<\/span><\/span>import<\/span> "k8s.io\/client-go\/discovery"<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u521b\u5efa DiscoveryClient<\/span>\n<\/span><\/span>discoveryClient<\/span>,<\/span> err<\/span> :=<\/span> discovery<\/span>.<\/span>NewDiscoveryClientForConfig<\/span>(<\/span>config<\/span>)<\/span>\n<\/span><\/span>if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> panic<\/span>(<\/span>err<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u83b7\u53d6 API \u7ec4<\/span>\n<\/span><\/span>apiGroups<\/span>,<\/span> err<\/span> :=<\/span> discoveryClient<\/span>.<\/span>ServerGroups<\/span>()<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u83b7\u53d6 API \u8d44\u6e90<\/span>\n<\/span><\/span>resources<\/span>,<\/span> err<\/span> :=<\/span> discoveryClient<\/span>.<\/span>ServerResources<\/span>()<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u83b7\u53d6\u670d\u52a1\u5668\u7248\u672c<\/span>\n<\/span><\/span>version<\/span>,<\/span> err<\/span> :=<\/span> discoveryClient<\/span>.<\/span>ServerVersion<\/span>()<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        Informer \u673a\u5236<\/h2>\n
        SharedInformerFactory<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ SharedInformerFactory \u7ba1\u7406\u6240\u6709 Informer<\/span>\n<\/span><\/span>\/\/ \u786e\u4fdd\u6bcf\u79cd\u8d44\u6e90\u53ea\u6709\u4e00\u4e2a Informer<\/span>\n<\/span><\/span>\n<\/span><\/span>import<\/span> (<\/span>\n<\/span><\/span> "k8s.io\/client-go\/informers"<\/span>\n<\/span><\/span> "time"<\/span>\n<\/span><\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u521b\u5efa SharedInformerFactory<\/span>\n<\/span><\/span>factory<\/span> :=<\/span> informers<\/span>.<\/span>NewSharedInformerFactory<\/span>(<\/span>clientset<\/span>,<\/span> 30<\/span>*<\/span>time<\/span>.<\/span>Second<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u83b7\u53d6\u7279\u5b9a\u8d44\u6e90\u7684 Informer<\/span>\n<\/span><\/span>podInformer<\/span> :=<\/span> factory<\/span>.<\/span>Core<\/span>().<\/span>V1<\/span>().<\/span>Pods<\/span>()<\/span>\n<\/span><\/span>deploymentInformer<\/span> :=<\/span> factory<\/span>.<\/span>Apps<\/span>().<\/span>V1<\/span>().<\/span>Deployments<\/span>()<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u542f\u52a8\u6240\u6709 Informer<\/span>\n<\/span><\/span>stopCh<\/span> :=<\/span> make<\/span>(<\/span>chan<\/span> struct<\/span>{})<\/span>\n<\/span><\/span>factory<\/span>.<\/span>Start<\/span>(<\/span>stopCh<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u7b49\u5f85\u7f13\u5b58\u540c\u6b65<\/span>\n<\/span><\/span>factory<\/span>.<\/span>WaitForCacheSync<\/span>(<\/span>stopCh<\/span>)<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        Informer \u7ec4\u4ef6<\/h3>\n
        graph TB\n subgraph informer[\"Informer \u5185\u90e8\u7ed3\u6784\"]\n Controller[\"Controller\"]\n Reflector[\"Reflector\"]\n DeltaFIFO[\"DeltaFIFO\"]\n Indexer[\"Indexer (Store)\"]\n Lister[\"Lister\"]\n Handler[\"EventHandler\"]\n end\n\n subgraph api[\"API Server\"]\n Watch[\"Watch API\"]\n end\n\n Watch -->|\"\u4e8b\u4ef6\u6d41\"| Reflector\n Reflector -->|\"Add\/Update\/Delete\"| DeltaFIFO\n DeltaFIFO -->|\"Pop\"| Controller\n Controller -->|\"\u66f4\u65b0\u7f13\u5b58\"| Indexer\n Controller -->|\"\u8c03\u7528\"| Handler\n Indexer -->|\"\u63d0\u4f9b\"| Lister\n<\/div>\n\n
        \u5de5\u5177\u7ec4\u4ef6<\/h2>\n
        WorkQueue<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ WorkQueue \u7528\u4e8e\u63a7\u5236\u5668\u7684\u5de5\u4f5c\u961f\u5217<\/span>\n<\/span><\/span>\n<\/span><\/span>import<\/span> "k8s.io\/client-go\/util\/workqueue"<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u57fa\u672c\u961f\u5217<\/span>\n<\/span><\/span>queue<\/span> :=<\/span> workqueue<\/span>.<\/span>New<\/span>()<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u5ef6\u8fdf\u961f\u5217<\/span>\n<\/span><\/span>delayingQueue<\/span> :=<\/span> workqueue<\/span>.<\/span>NewDelayingQueue<\/span>()<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u9650\u901f\u961f\u5217\uff08\u6700\u5e38\u7528\uff09<\/span>\n<\/span><\/span>rateLimitingQueue<\/span> :=<\/span> workqueue<\/span>.<\/span>NewRateLimitingQueue<\/span>(<\/span>\n<\/span><\/span> workqueue<\/span>.<\/span>DefaultControllerRateLimiter<\/span>(),<\/span>\n<\/span><\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u6dfb\u52a0\u5143\u7d20<\/span>\n<\/span><\/span>queue<\/span>.<\/span>Add<\/span>(<\/span>"key"<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u5ef6\u8fdf\u6dfb\u52a0<\/span>\n<\/span><\/span>delayingQueue<\/span>.<\/span>AddAfter<\/span>(<\/span>"key"<\/span>,<\/span> 5<\/span>*<\/span>time<\/span>.<\/span>Second<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u83b7\u53d6\u5143\u7d20<\/span>\n<\/span><\/span>key<\/span>,<\/span> shutdown<\/span> :=<\/span> queue<\/span>.<\/span>Get<\/span>()<\/span>\n<\/span><\/span>if<\/span> shutdown<\/span> {<\/span>\n<\/span><\/span> return<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>defer<\/span> queue<\/span>.<\/span>Done<\/span>(<\/span>key<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u5904\u7406\u5931\u8d25\uff0c\u91cd\u65b0\u5165\u961f<\/span>\n<\/span><\/span>if<\/span> err<\/span> :=<\/span> process<\/span>(<\/span>key<\/span>);<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> queue<\/span>.<\/span>AddRateLimited<\/span>(<\/span>key<\/span>)<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        Leader Election<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ Leader Election \u7528\u4e8e\u9ad8\u53ef\u7528\u63a7\u5236\u5668<\/span>\n<\/span><\/span>\n<\/span><\/span>import<\/span> (<\/span>\n<\/span><\/span> "k8s.io\/client-go\/tools\/leaderelection"<\/span>\n<\/span><\/span> "k8s.io\/client-go\/tools\/leaderelection\/resourcelock"<\/span>\n<\/span><\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u521b\u5efa\u9501<\/span>\n<\/span><\/span>lock<\/span> :=<\/span> &<\/span>resourcelock<\/span>.<\/span>LeaseLock<\/span>{<\/span>\n<\/span><\/span> LeaseMeta<\/span>:<\/span> metav1<\/span>.<\/span>ObjectMeta<\/span>{<\/span>\n<\/span><\/span> Name<\/span>:<\/span> "my-controller-lock"<\/span>,<\/span>\n<\/span><\/span> Namespace<\/span>:<\/span> "default"<\/span>,<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> Client<\/span>:<\/span> clientset<\/span>.<\/span>CoordinationV1<\/span>(),<\/span>\n<\/span><\/span> LockConfig<\/span>:<\/span> resourcelock<\/span>.<\/span>ResourceLockConfig<\/span>{<\/span>\n<\/span><\/span> Identity<\/span>:<\/span> hostname<\/span>,<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u914d\u7f6e\u9009\u4e3e<\/span>\n<\/span><\/span>leaderelection<\/span>.<\/span>RunOrDie<\/span>(<\/span>ctx<\/span>,<\/span> leaderelection<\/span>.<\/span>LeaderElectionConfig<\/span>{<\/span>\n<\/span><\/span> Lock<\/span>:<\/span> lock<\/span>,<\/span>\n<\/span><\/span> LeaseDuration<\/span>:<\/span> 15<\/span> *<\/span> time<\/span>.<\/span>Second<\/span>,<\/span>\n<\/span><\/span> RenewDeadline<\/span>:<\/span> 10<\/span> *<\/span> time<\/span>.<\/span>Second<\/span>,<\/span>\n<\/span><\/span> RetryPeriod<\/span>:<\/span> 2<\/span> *<\/span> time<\/span>.<\/span>Second<\/span>,<\/span>\n<\/span><\/span> Callbacks<\/span>:<\/span> leaderelection<\/span>.<\/span>LeaderCallbacks<\/span>{<\/span>\n<\/span><\/span> OnStartedLeading<\/span>:<\/span> func<\/span>(<\/span>ctx<\/span> context<\/span>.<\/span>Context<\/span>)<\/span> {<\/span>\n<\/span><\/span> \/\/ \u6210\u4e3a Leader\uff0c\u5f00\u59cb\u5de5\u4f5c<\/span>\n<\/span><\/span> run<\/span>(<\/span>ctx<\/span>)<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> OnStoppedLeading<\/span>:<\/span> func<\/span>()<\/span> {<\/span>\n<\/span><\/span> \/\/ \u5931\u53bb Leader\uff0c\u505c\u6b62\u5de5\u4f5c<\/span>\n<\/span><\/span> log<\/span>.<\/span>Fatal<\/span>(<\/span>"lost leader election"<\/span>)<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> OnNewLeader<\/span>:<\/span> func<\/span>(<\/span>identity<\/span> string<\/span>)<\/span> {<\/span>\n<\/span><\/span> \/\/ \u65b0 Leader \u5f53\u9009<\/span>\n<\/span><\/span> log<\/span>.<\/span>Printf<\/span>(<\/span>"new leader: %s"<\/span>,<\/span> identity<\/span>)<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span>})<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        \u914d\u7f6e\u7ba1\u7406<\/h2>\n
        kubeconfig \u52a0\u8f7d<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ \u4ece\u6587\u4ef6\u52a0\u8f7d\u914d\u7f6e<\/span>\n<\/span><\/span>import<\/span> "k8s.io\/client-go\/tools\/clientcmd"<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u4ece\u9ed8\u8ba4\u4f4d\u7f6e\u52a0\u8f7d<\/span>\n<\/span><\/span>config<\/span>,<\/span> err<\/span> :=<\/span> clientcmd<\/span>.<\/span>BuildConfigFromFlags<\/span>(<\/span>""<\/span>,<\/span> clientcmd<\/span>.<\/span>RecommendedHomeFile<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u4ece\u6307\u5b9a\u8def\u5f84\u52a0\u8f7d<\/span>\n<\/span><\/span>config<\/span>,<\/span> err<\/span> :=<\/span> clientcmd<\/span>.<\/span>BuildConfigFromFlags<\/span>(<\/span>""<\/span>,<\/span> "\/path\/to\/kubeconfig"<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u4ece\u96c6\u7fa4\u5185\u90e8\u52a0\u8f7d\uff08Pod \u5185\uff09<\/span>\n<\/span><\/span>config<\/span>,<\/span> err<\/span> :=<\/span> rest<\/span>.<\/span>InClusterConfig<\/span>()<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u901a\u7528\u52a0\u8f7d\uff08\u4f18\u5148\u4f7f\u7528 kubeconfig\uff0c\u56de\u9000\u5230 in-cluster\uff09<\/span>\n<\/span><\/span>config<\/span>,<\/span> err<\/span> :=<\/span> clientcmd<\/span>.<\/span>BuildConfigFromFlags<\/span>(<\/span>""<\/span>,<\/span> ""<\/span>)<\/span>\n<\/span><\/span>if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> config<\/span>,<\/span> err<\/span> =<\/span> rest<\/span>.<\/span>InClusterConfig<\/span>()<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        \u914d\u7f6e\u9009\u9879<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ \u914d\u7f6e REST \u5ba2\u6237\u7aef<\/span>\n<\/span><\/span>config<\/span> :=<\/span> &<\/span>rest<\/span>.<\/span>Config<\/span>{<\/span>\n<\/span><\/span> Host<\/span>:<\/span> "https:\/\/api.example.com:6443"<\/span>,<\/span>\n<\/span><\/span> TLSClientConfig<\/span>:<\/span> rest<\/span>.<\/span>TLSClientConfig<\/span>{<\/span>\n<\/span><\/span> CAFile<\/span>:<\/span> "\/path\/to\/ca.crt"<\/span>,<\/span>\n<\/span><\/span> CertFile<\/span>:<\/span> "\/path\/to\/client.crt"<\/span>,<\/span>\n<\/span><\/span> KeyFile<\/span>:<\/span> "\/path\/to\/client.key"<\/span>,<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> \/\/ \u6216\u4f7f\u7528 Bearer Token<\/span>\n<\/span><\/span> BearerToken<\/span>:<\/span> "my-token"<\/span>,<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8d85\u65f6\u8bbe\u7f6e<\/span>\n<\/span><\/span> Timeout<\/span>:<\/span> 30<\/span> *<\/span> time<\/span>.<\/span>Second<\/span>,<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ QPS \u9650\u5236<\/span>\n<\/span><\/span> QPS<\/span>:<\/span> 50<\/span>,<\/span>\n<\/span><\/span> Burst<\/span>:<\/span> 100<\/span>,<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u5185\u5bb9\u7c7b\u578b<\/span>\n<\/span><\/span> ContentType<\/span>:<\/span> "application\/json"<\/span>,<\/span>\n<\/span><\/span> \/\/ \u6216\u4f7f\u7528 Protobuf<\/span>\n<\/span><\/span> \/\/ ContentType: "application\/vnd.kubernetes.protobuf",<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        \u7248\u672c\u517c\u5bb9\u6027<\/h2>\n
        \u7248\u672c\u5bf9\u5e94\u5173\u7cfb<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        client-go \u4e0e Kubernetes \u7248\u672c\u5bf9\u5e94:\n\nclient-go\u7248\u672c Kubernetes\u7248\u672c\nv0.28.x v1.28.x\nv0.27.x v1.27.x\nv0.26.x v1.26.x\n...\n\n\u517c\u5bb9\u6027\u89c4\u5219:\n- client-go v0.N \u4e0e Kubernetes v1.N \u517c\u5bb9\n- client-go \u53ef\u4ee5\u4e0e +\/- 2 \u4e2a\u6b21\u7248\u672c\u7684 API Server \u4ea4\u4e92\n- \u5efa\u8bae\u4f7f\u7528\u4e0e\u96c6\u7fa4\u7248\u672c\u5339\u914d\u7684 client-go<\/code><\/pre>\n <\/figure>\n<\/div>\n
        \u5bfc\u5165\u65b9\u5f0f<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ Go modules \u5bfc\u5165<\/span>\n<\/span><\/span>\/\/ go.mod<\/span>\n<\/span><\/span>module<\/span> mycontroller<\/span>\n<\/span><\/span>\n<\/span><\/span>go<\/span> 1.21<\/span>\n<\/span><\/span>\n<\/span><\/span>require<\/span> (<\/span>\n<\/span><\/span> k8s<\/span>.<\/span>io<\/span>\/<\/span>api<\/span> v0<\/span>.28.0<\/span>\n<\/span><\/span> k8s<\/span>.<\/span>io<\/span>\/<\/span>apimachinery<\/span> v0<\/span>.28.0<\/span>\n<\/span><\/span> k8s<\/span>.<\/span>io<\/span>\/<\/span>client<\/span>-<\/span>go<\/span> v0<\/span>.28.0<\/span>\n<\/span><\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u4ee3\u7801\u4e2d\u5bfc\u5165<\/span>\n<\/span><\/span>import<\/span> (<\/span>\n<\/span><\/span> "k8s.io\/api\/core\/v1"<\/span>\n<\/span><\/span> metav1<\/span> "k8s.io\/apimachinery\/pkg\/apis\/meta\/v1"<\/span>\n<\/span><\/span> "k8s.io\/client-go\/kubernetes"<\/span>\n<\/span><\/span>)<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        \u6700\u4f73\u5b9e\u8df5<\/h2>\n
        \u5ba2\u6237\u7aef\u9009\u62e9<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ \u9009\u62e9\u5408\u9002\u7684\u5ba2\u6237\u7aef<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ 1. \u5185\u7f6e\u8d44\u6e90 \u2192 Clientset<\/span>\n<\/span><\/span>clientset<\/span>.<\/span>CoreV1<\/span>().<\/span>Pods<\/span>(<\/span>ns<\/span>).<\/span>Get<\/span>(<\/span>ctx<\/span>,<\/span> name<\/span>,<\/span> opts<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ 2. CRD \u8d44\u6e90 \u2192 DynamicClient<\/span>\n<\/span><\/span>dynamicClient<\/span>.<\/span>Resource<\/span>(<\/span>gvr<\/span>).<\/span>Namespace<\/span>(<\/span>ns<\/span>).<\/span>Get<\/span>(<\/span>ctx<\/span>,<\/span> name<\/span>,<\/span> opts<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ 3. \u8d44\u6e90\u53d1\u73b0 \u2192 DiscoveryClient<\/span>\n<\/span><\/span>discoveryClient<\/span>.<\/span>ServerResources<\/span>()<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ 4. \u5e95\u5c42\u63a7\u5236 \u2192 RESTClient<\/span>\n<\/span><\/span>restClient<\/span>.<\/span>Get<\/span>().<\/span>Resource<\/span>(<\/span>"pods"<\/span>).<\/span>Do<\/span>(<\/span>ctx<\/span>).<\/span>Into<\/span>(<\/span>result<\/span>)<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        \u9519\u8bef\u5904\u7406<\/h3>\n\n\n\n
        \n 
        \n 
        \n <\/span>\n <\/figcaption>\n 
        \/\/ \u5904\u7406\u5e38\u89c1\u9519\u8bef<\/span>\n<\/span><\/span>import<\/span> "k8s.io\/apimachinery\/pkg\/api\/errors"<\/span>\n<\/span><\/span>\n<\/span><\/span>pod<\/span>,<\/span> err<\/span> :=<\/span> clientset<\/span>.<\/span>CoreV1<\/span>().<\/span>Pods<\/span>(<\/span>ns<\/span>).<\/span>Get<\/span>(<\/span>ctx<\/span>,<\/span> name<\/span>,<\/span> metav1<\/span>.<\/span>GetOptions<\/span>{})<\/span>\n<\/span><\/span>if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> if<\/span> errors<\/span>.<\/span>IsNotFound<\/span>(<\/span>err<\/span>)<\/span> {<\/span>\n<\/span><\/span> \/\/ \u8d44\u6e90\u4e0d\u5b58\u5728<\/span>\n<\/span><\/span> return<\/span> nil<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span> if<\/span> errors<\/span>.<\/span>IsConflict<\/span>(<\/span>err<\/span>)<\/span> {<\/span>\n<\/span><\/span> \/\/ \u7248\u672c\u51b2\u7a81\uff0c\u9700\u8981\u91cd\u65b0\u83b7\u53d6\u5e76\u91cd\u8bd5<\/span>\n<\/span><\/span> return<\/span> retry<\/span>()<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span> if<\/span> errors<\/span>.<\/span>IsForbidden<\/span>(<\/span>err<\/span>)<\/span> {<\/span>\n<\/span><\/span> \/\/ \u6743\u9650\u4e0d\u8db3<\/span>\n<\/span><\/span> return<\/span> err<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span> \/\/ \u5176\u4ed6\u9519\u8bef<\/span>\n<\/span><\/span> return<\/span> err<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
        \u603b\u7ed3<\/h2>\n
        client-go \u6838\u5fc3\u7ec4\u4ef6\uff1a<\/p>"},{"title":"CNI \u63d2\u4ef6\u5de5\u4f5c\u6d41","link":"https:\/\/cloudnative.lei6393.com\/calico\/04-calico-data-plane\/01-cni-plugin-workflow\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/calico\/04-calico-data-plane\/01-cni-plugin-workflow\/","description":"
        \u6982\u8ff0<\/h2>\n
        Calico CNI \u63d2\u4ef6\u662f Kubernetes \u4e0e Calico \u7f51\u7edc\u4e4b\u95f4\u7684\u6865\u6881\u3002\u5f53 kubelet \u521b\u5efa\u6216\u5220\u9664 Pod \u65f6\uff0c\u4f1a\u8c03\u7528 CNI \u63d2\u4ef6\u6765\u914d\u7f6e Pod \u7684\u7f51\u7edc\u3002\u672c\u7ae0\u6df1\u5165\u5206\u6790 Calico CNI \u63d2\u4ef6\u7684\u5b8c\u6574\u5de5\u4f5c\u6d41\u7a0b\uff0c\u5305\u62ec ADD\u3001DEL \u64cd\u4f5c\u7684\u8be6\u7ec6\u5b9e\u73b0\u3002<\/p>"},{"title":"containerd \u6574\u4f53\u67b6\u6784","link":"https:\/\/cloudnative.lei6393.com\/containerd\/02-architecture\/01-overall-architecture\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/containerd\/02-architecture\/01-overall-architecture\/","description":"
        \u672c\u7ae0\u6df1\u5165\u89e3\u6790 containerd \u7684\u6574\u4f53\u67b6\u6784\u8bbe\u8ba1\uff0c\u5e2e\u52a9\u4f60\u7406\u89e3\u5404\u7ec4\u4ef6\u4e4b\u95f4\u7684\u5173\u7cfb\u548c\u6570\u636e\u6d41\u5411\u3002<\/p>\n
        \u8bbe\u8ba1\u54f2\u5b66<\/h2>\n
        containerd \u7684\u8bbe\u8ba1\u9075\u5faa\u4ee5\u4e0b\u6838\u5fc3\u539f\u5219\uff1a<\/p>\n
        \u7b80\u5355\u6027 (Simplicity)<\/h3>\n
          \n
        • \u4e13\u6ce8\u4e8e\u5bb9\u5668\u8fd0\u884c\u65f6\u6838\u5fc3\u529f\u80fd<\/li>\n
        • \u4e0d\u5305\u542b\u6784\u5efa\u3001\u7f16\u6392\u7b49\u9ad8\u7ea7\u529f\u80fd<\/li>\n
        • API \u8bbe\u8ba1\u7b80\u6d01\u660e\u4e86<\/li>\n<\/ul>\n
          \u5065\u58ee\u6027 (Robustness)<\/h3>\n
            \n
          • \u5bb9\u5668\u8fdb\u7a0b\u4e0e containerd \u89e3\u8026<\/li>\n
          • containerd \u91cd\u542f\u4e0d\u5f71\u54cd\u8fd0\u884c\u4e2d\u7684\u5bb9\u5668<\/li>\n
          • \u6545\u969c\u9694\u79bb\u8bbe\u8ba1<\/li>\n<\/ul>\n
            \u53ef\u79fb\u690d\u6027 (Portability)<\/h3>\n
              \n
            • \u652f\u6301\u591a\u79cd\u64cd\u4f5c\u7cfb\u7edf\uff08Linux, Windows, FreeBSD\uff09<\/li>\n
            • \u652f\u6301\u591a\u79cd CPU \u67b6\u6784<\/li>\n
            • \u53ef\u5d4c\u5165\u5230\u5404\u79cd\u7cfb\u7edf\u4e2d<\/li>\n<\/ul>\n
              \u53ef\u6269\u5c55\u6027 (Extensibility)<\/h3>\n
                \n
              • \u63d2\u4ef6\u5316\u67b6\u6784<\/li>\n
              • \u53ef\u66ff\u6362\u7684\u7ec4\u4ef6\u5b9e\u73b0<\/li>\n
              • \u6e05\u6670\u7684\u6269\u5c55\u70b9<\/li>\n<\/ul>\n
                \u67b6\u6784\u6982\u89c8<\/h2>\n
                flowchart TB\n subgraph clients[\"Client Layer\"]\n ctr[\"ctr\"]\n nerdctl[\"nerdctl\"]\n docker[\"Docker Engine\"]\n crictl[\"crictl\"]\n kubelet[\"kubelet\"]\n end\n\n subgraph api_layer[\"API Layer\"]\n grpc[\"gRPC Server(TCP\/Unix Socket)\"]\n ttrpc[\"TTRPC Server(Shim \u901a\u4fe1)\"]\n end\n\n subgraph services[\"Service Layer\"]\n containers_svc[\"ContainersService\"]\n images_svc[\"ImagesService\"]\n tasks_svc[\"TasksService\"]\n content_svc[\"ContentService\"]\n snapshots_svc[\"SnapshotsService\"]\n events_svc[\"EventsService\"]\n leases_svc[\"LeasesService\"]\n namespaces_svc[\"NamespacesService\"]\n end\n\n subgraph core[\"Core Layer\"]\n metadata[\"Metadata Store(BoltDB)\"]\n content_store[\"Content Store\"]\n snapshotter[\"Snapshotter\"]\n runtime[\"Runtime Manager\"]\n events[\"Event System\"]\n end\n\n subgraph external[\"External\"]\n shim[\"containerd-shim\"]\n runc[\"runc\"]\n registry[\"Container Registry\"]\n end\n\n clients --> grpc\n grpc --> services\n services --> core\n tasks_svc --> ttrpc\n ttrpc --> shim\n shim --> runc\n content_store --> registry\n\n style api_layer fill:#e6f3ff\n style services fill:#fff2e6\n style core fill:#e6ffe6\n<\/div>\n\n
                \u6838\u5fc3\u7ec4\u4ef6\u8be6\u89e3<\/h2>\n
                1. API Layer - \u63a5\u53e3\u5c42<\/h3>\n
                containerd \u901a\u8fc7 gRPC \u66b4\u9732 API\uff1a<\/p>"},{"title":"Content Store - \u5185\u5bb9\u5bfb\u5740\u5b58\u50a8\u539f\u7406","link":"https:\/\/cloudnative.lei6393.com\/containerd\/03-content-store\/01-content-addressable\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/containerd\/03-content-store\/01-content-addressable\/","description":"
                Content Store \u662f containerd \u7684\u6838\u5fc3\u7ec4\u4ef6\u4e4b\u4e00\uff0c\u5b83\u91c7\u7528\u5185\u5bb9\u5bfb\u5740\u5b58\u50a8\uff08Content-Addressable Storage, CAS\uff09\u65b9\u5f0f\u7ba1\u7406\u6240\u6709\u7684\u4e8c\u8fdb\u5236\u6570\u636e\uff08Blob\uff09\uff0c\u5305\u62ec\u955c\u50cf\u5c42\u3001\u914d\u7f6e\u6587\u4ef6\u7b49\u3002<\/p>\n
                \u5185\u5bb9\u5bfb\u5740\u5b58\u50a8\u539f\u7406<\/h2>\n
                \u4ec0\u4e48\u662f\u5185\u5bb9\u5bfb\u5740<\/h3>\n
                \u5185\u5bb9\u5bfb\u5740\u5b58\u50a8\u6839\u636e\u6570\u636e\u5185\u5bb9\u672c\u8eab\u6765\u6807\u8bc6\u548c\u68c0\u7d22\u6570\u636e\uff0c\u800c\u975e\u4f7f\u7528\u4f20\u7edf\u7684\u8def\u5f84\u6216\u6587\u4ef6\u540d\uff1a<\/p>\n
                flowchart LR\n subgraph traditional[\"\u4f20\u7edf\u5b58\u50a8\"]\n path[\"\/images\/nginx\/layer1.tar\"]\n file1[\"\u6587\u4ef6\u5185\u5bb9\"]\n end\n\n subgraph cas[\"\u5185\u5bb9\u5bfb\u5740\u5b58\u50a8\"]\n digest[\"sha256:a3ed95ca...\"]\n file2[\"\u76f8\u540c\u5185\u5bb9\"]\n end\n\n path --> file1\n digest --> file2\n\n note[\"\u76f8\u540c\u5185\u5bb9\u53ea\u5b58\u50a8\u4e00\u4efd\"]\n<\/div>\n\n
                Digest \u683c\u5f0f<\/h3>\n
                containerd \u4f7f\u7528 OCI \u6807\u51c6\u7684 Digest \u683c\u5f0f\uff1a<\/p>"},{"title":"Controller Manager \u67b6\u6784\u6982\u89c8","link":"https:\/\/cloudnative.lei6393.com\/kubernetes\/05-controller\/01-architecture\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/kubernetes\/05-controller\/01-architecture\/","description":"
                \u672c\u6587\u8be6\u7ec6\u4ecb\u7ecd Kubernetes Controller Manager \u7684\u6574\u4f53\u67b6\u6784\uff0c\u5305\u62ec\u7ec4\u4ef6\u7ed3\u6784\u3001\u542f\u52a8\u6d41\u7a0b\u548c\u63a7\u5236\u5668\u5217\u8868\u3002<\/p>\n
                1. Controller Manager \u6982\u8ff0<\/h2>\n
                1.1 \u6838\u5fc3\u804c\u8d23<\/h3>\n
                Controller Manager \u662f Kubernetes \u63a7\u5236\u5e73\u9762\u7684\u6838\u5fc3\u7ec4\u4ef6\uff0c\u8d1f\u8d23\u8fd0\u884c\u6240\u6709\u5185\u7f6e\u63a7\u5236\u5668\uff1a<\/p>\n
                graph TB\n subgraph control_plane[\"Control Plane\"]\n API[\"API Server\"]\n CM[\"Controller Manager\"]\n SCHED[\"Scheduler\"]\n end\n\n subgraph controllers[\"\u5185\u7f6e\u63a7\u5236\u5668\"]\n DC[\"Deployment\"]\n RSC[\"ReplicaSet\"]\n SC[\"StatefulSet\"]\n DSC[\"DaemonSet\"]\n JC[\"Job\"]\n GC[\"GC\"]\n NC[\"Namespace\"]\n SAC[\"ServiceAccount\"]\n end\n\n CM --> DC\n CM --> RSC\n CM --> SC\n CM --> DSC\n CM --> JC\n CM --> GC\n CM --> NC\n CM --> SAC\n\n DC --> API\n RSC --> API\n SC --> API\n<\/div>\n\n
                1.2 \u8bbe\u8ba1\u539f\u5219<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \u63a7\u5236\u5668\u8bbe\u8ba1\u539f\u5219:\n\u251c\u2500\u2500 \u58f0\u660e\u5f0f\n\u2502 \u2514\u2500\u2500 \u7528\u6237\u58f0\u660e\u671f\u671b\u72b6\u6001\uff0c\u63a7\u5236\u5668\u8d1f\u8d23\u8fbe\u6210\n\u251c\u2500\u2500 \u5e42\u7b49\u6027\n\u2502 \u2514\u2500\u2500 \u591a\u6b21\u6267\u884c\u7ed3\u679c\u4e00\u81f4\n\u251c\u2500\u2500 \u677e\u8026\u5408\n\u2502 \u2514\u2500\u2500 \u63a7\u5236\u5668\u4e4b\u95f4\u76f8\u4e92\u72ec\u7acb\n\u251c\u2500\u2500 \u6700\u7ec8\u4e00\u81f4\n\u2502 \u2514\u2500\u2500 \u7cfb\u7edf\u6700\u7ec8\u4f1a\u6536\u655b\u5230\u671f\u671b\u72b6\u6001\n\u2514\u2500\u2500 Level-Triggered\n \u2514\u2500\u2500 \u57fa\u4e8e\u72b6\u6001\u800c\u975e\u4e8b\u4ef6\u9a71\u52a8<\/code><\/pre>\n <\/figure>\n<\/div>\n
                1.3 kube-controller-manager vs cloud-controller-manager<\/h3>\n\n \n \n \n \n \n 
                \u7ec4\u4ef6<\/th>\n \u804c\u8d23<\/th>\n \u63a7\u5236\u5668<\/th>\n <\/tr>\n <\/thead>\n 
                kube-controller-manager<\/td>\n \u6838\u5fc3\u8d44\u6e90\u63a7\u5236<\/td>\n Deployment, ReplicaSet, Job \u7b49<\/td>\n <\/tr>\n 
                cloud-controller-manager<\/td>\n \u4e91\u5e73\u53f0\u96c6\u6210<\/td>\n Node, Route, Service (LB)<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
                2. \u6574\u4f53\u67b6\u6784<\/h2>\n
                2.1 \u7ec4\u4ef6\u67b6\u6784<\/h3>\n
                graph TB\n subgraph kcm[\"kube-controller-manager\"]\n subgraph infra[\"\u57fa\u7840\u8bbe\u65bd\"]\n LC[\"LeaderElection\"]\n SIF[\"SharedInformerFactory\"]\n CLIENT[\"Clientset\"]\n end\n\n subgraph controller_ctx[\"Controller Context\"]\n CM_CTX[\"ControllerContext\"]\n INF_START[\"InformerStarted\"]\n end\n\n subgraph controllers[\"Controllers\"]\n C1[\"Deployment\"]\n C2[\"ReplicaSet\"]\n C3[\"StatefulSet\"]\n C4[\"DaemonSet\"]\n C5[\"Job\"]\n C6[\"...\"]\n end\n end\n\n LC --> CM_CTX\n CLIENT --> SIF\n SIF --> CM_CTX\n CM_CTX --> C1\n CM_CTX --> C2\n CM_CTX --> C3\n CM_CTX --> C4\n CM_CTX --> C5\n<\/div>\n\n
                2.2 \u6838\u5fc3\u6570\u636e\u7ed3\u6784<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ ControllerContext \u5305\u542b\u63a7\u5236\u5668\u8fd0\u884c\u6240\u9700\u7684\u6240\u6709\u4e0a\u4e0b\u6587<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/controllermanager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>type<\/span> ControllerContext<\/span> struct<\/span> {<\/span>\n<\/span><\/span> \/\/ \u5ba2\u6237\u7aef\u914d\u7f6e<\/span>\n<\/span><\/span> ClientBuilder<\/span> clientbuilder<\/span>.<\/span>ControllerClientBuilder<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ Informer \u5de5\u5382<\/span>\n<\/span><\/span> InformerFactory<\/span> informers<\/span>.<\/span>SharedInformerFactory<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u5bf9\u8c61\u5143\u6570\u636e Informer<\/span>\n<\/span><\/span> ObjectOrMetadataInformerFactory<\/span> controller<\/span>.<\/span>InformerFactory<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u7ec4\u4ef6\u914d\u7f6e<\/span>\n<\/span><\/span> ComponentConfig<\/span> kubectrlmgrconfig<\/span>.<\/span>KubeControllerManagerConfiguration<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u4e8b\u4ef6\u8bb0\u5f55\u5668<\/span>\n<\/span><\/span> EventRecorder<\/span> record<\/span>.<\/span>EventRecorder<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u4e91\u63d0\u4f9b\u5546<\/span>\n<\/span><\/span> Cloud<\/span> cloudprovider<\/span>.<\/span>Interface<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u505c\u6b62\u901a\u9053<\/span>\n<\/span><\/span> Stop<\/span> <-<\/span>chan<\/span> struct<\/span>{}<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ Informer \u542f\u52a8\u72b6\u6001<\/span>\n<\/span><\/span> InformersStarted<\/span> chan<\/span> struct<\/span>{}<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u9700\u8981\u7684\u96c6\u7fa4\u89d2\u8272<\/span>\n<\/span><\/span> AvailableResources<\/span> map<\/span>[<\/span>schema<\/span>.<\/span>GroupVersionResource<\/span>]<\/span>bool<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u63a7\u5236\u5668\u521d\u59cb\u5316\u51fd\u6570\u7c7b\u578b<\/span>\n<\/span><\/span>type<\/span> InitFunc<\/span> func<\/span>(<\/span>ctx<\/span> context<\/span>.<\/span>Context<\/span>,<\/span> controllerCtx<\/span> ControllerContext<\/span>)<\/span> (<\/span>controller<\/span>.<\/span>Interface<\/span>,<\/span> bool<\/span>,<\/span> error<\/span>)<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                3. \u542f\u52a8\u6d41\u7a0b<\/h2>\n
                3.1 \u542f\u52a8\u6d41\u7a0b\u56fe<\/h3>\n
                sequenceDiagram\n participant Main\n participant Options\n participant Server\n participant LeaderElection\n participant Controllers\n\n Main->>Options: NewKubeControllerManagerOptions\n Options->>Options: \u89e3\u6790\u547d\u4ee4\u884c\u53c2\u6570\n Main->>Server: NewControllerManagerCommand\n Server->>Server: \u6784\u5efa Config\n Server->>LeaderElection: \u542f\u52a8\u9009\u4e3e\n LeaderElection->>LeaderElection: \u83b7\u53d6\u9501\n LeaderElection->>Controllers: Run\n Controllers->>Controllers: \u521d\u59cb\u5316 SharedInformerFactory\n Controllers->>Controllers: \u542f\u52a8\u5404\u63a7\u5236\u5668\n Controllers->>Controllers: \u7b49\u5f85\u7f13\u5b58\u540c\u6b65\n Controllers->>Controllers: \u8fd0\u884c\n<\/div>\n\n
                3.2 \u5165\u53e3\u51fd\u6570<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ main \u5165\u53e3<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/controller-manager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> main<\/span>()<\/span> {<\/span>\n<\/span><\/span> command<\/span> :=<\/span> app<\/span>.<\/span>NewControllerManagerCommand<\/span>()<\/span>\n<\/span><\/span> code<\/span> :=<\/span> cli<\/span>.<\/span>Run<\/span>(<\/span>command<\/span>)<\/span>\n<\/span><\/span> os<\/span>.<\/span>Exit<\/span>(<\/span>code<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ NewControllerManagerCommand \u521b\u5efa\u547d\u4ee4<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/controllermanager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> NewControllerManagerCommand<\/span>()<\/span> *<\/span>cobra<\/span>.<\/span>Command<\/span> {<\/span>\n<\/span><\/span> s<\/span>,<\/span> err<\/span> :=<\/span> options<\/span>.<\/span>NewKubeControllerManagerOptions<\/span>()<\/span>\n<\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> klog<\/span>.<\/span>Fatalf<\/span>(<\/span>"unable to initialize command options: %v"<\/span>,<\/span> err<\/span>)<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> cmd<\/span> :=<\/span> &<\/span>cobra<\/span>.<\/span>Command<\/span>{<\/span>\n<\/span><\/span> Use<\/span>:<\/span> "kube-controller-manager"<\/span>,<\/span>\n<\/span><\/span> RunE<\/span>:<\/span> func<\/span>(<\/span>cmd<\/span> *<\/span>cobra<\/span>.<\/span>Command<\/span>,<\/span> args<\/span> []<\/span>string<\/span>)<\/span> error<\/span> {<\/span>\n<\/span><\/span> \/\/ \u5b8c\u6210\u914d\u7f6e<\/span>\n<\/span><\/span> c<\/span>,<\/span> err<\/span> :=<\/span> s<\/span>.<\/span>Config<\/span>(<\/span>KnownControllers<\/span>(),<\/span> ControllersDisabledByDefault<\/span>.<\/span>List<\/span>())<\/span>\n<\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> return<\/span> err<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8fd0\u884c<\/span>\n<\/span><\/span> return<\/span> Run<\/span>(<\/span>c<\/span>.<\/span>Complete<\/span>(),<\/span> wait<\/span>.<\/span>NeverStop<\/span>)<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> return<\/span> cmd<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                3.3 Run \u51fd\u6570<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ Run \u542f\u52a8 Controller Manager<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/controllermanager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> Run<\/span>(<\/span>c<\/span> *<\/span>config<\/span>.<\/span>CompletedConfig<\/span>,<\/span> stopCh<\/span> <-<\/span>chan<\/span> struct<\/span>{})<\/span> error<\/span> {<\/span>\n<\/span><\/span> \/\/ 1. \u521b\u5efa\u63a7\u5236\u5668\u4e0a\u4e0b\u6587<\/span>\n<\/span><\/span> controllerContext<\/span>,<\/span> err<\/span> :=<\/span> CreateControllerContext<\/span>(<\/span>c<\/span>,<\/span> rootClientBuilder<\/span>,<\/span> clientBuilder<\/span>,<\/span> stopCh<\/span>)<\/span>\n<\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> return<\/span> err<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ 2. \u8bbe\u7f6e\u5065\u5eb7\u68c0\u67e5<\/span>\n<\/span><\/span> var<\/span> checks<\/span> []<\/span>healthz<\/span>.<\/span>HealthChecker<\/span>\n<\/span><\/span> var<\/span> electionChecker<\/span> *<\/span>leaderelection<\/span>.<\/span>HealthzAdaptor<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ 3. Leader Election<\/span>\n<\/span><\/span> if<\/span> c<\/span>.<\/span>ComponentConfig<\/span>.<\/span>Generic<\/span>.<\/span>LeaderElection<\/span>.<\/span>LeaderElect<\/span> {<\/span>\n<\/span><\/span> electionChecker<\/span> =<\/span> leaderelection<\/span>.<\/span>NewLeaderHealthzAdaptor<\/span>(<\/span>time<\/span>.<\/span>Second<\/span> *<\/span> 20<\/span>)<\/span>\n<\/span><\/span> checks<\/span> =<\/span> append<\/span>(<\/span>checks<\/span>,<\/span> electionChecker<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span> go<\/span> leaderelection<\/span>.<\/span>RunOrDie<\/span>(<\/span>context<\/span>.<\/span>TODO<\/span>(),<\/span> leaderelection<\/span>.<\/span>LeaderElectionConfig<\/span>{<\/span>\n<\/span><\/span> Lock<\/span>:<\/span> lock<\/span>,<\/span>\n<\/span><\/span> LeaseDuration<\/span>:<\/span> c<\/span>.<\/span>ComponentConfig<\/span>.<\/span>Generic<\/span>.<\/span>LeaderElection<\/span>.<\/span>LeaseDuration<\/span>.<\/span>Duration<\/span>,<\/span>\n<\/span><\/span> RenewDeadline<\/span>:<\/span> c<\/span>.<\/span>ComponentConfig<\/span>.<\/span>Generic<\/span>.<\/span>LeaderElection<\/span>.<\/span>RenewDeadline<\/span>.<\/span>Duration<\/span>,<\/span>\n<\/span><\/span> RetryPeriod<\/span>:<\/span> c<\/span>.<\/span>ComponentConfig<\/span>.<\/span>Generic<\/span>.<\/span>LeaderElection<\/span>.<\/span>RetryPeriod<\/span>.<\/span>Duration<\/span>,<\/span>\n<\/span><\/span> Callbacks<\/span>:<\/span> leaderelection<\/span>.<\/span>LeaderCallbacks<\/span>{<\/span>\n<\/span><\/span> OnStartedLeading<\/span>:<\/span> func<\/span>(<\/span>ctx<\/span> context<\/span>.<\/span>Context<\/span>)<\/span> {<\/span>\n<\/span><\/span> \/\/ \u83b7\u5f97 Leader\uff0c\u542f\u52a8\u63a7\u5236\u5668<\/span>\n<\/span><\/span> run<\/span>(<\/span>ctx<\/span>,<\/span> controllerContext<\/span>)<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> OnStoppedLeading<\/span>:<\/span> func<\/span>()<\/span> {<\/span>\n<\/span><\/span> klog<\/span>.<\/span>Fatalf<\/span>(<\/span>"leaderelection lost"<\/span>)<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> },<\/span>\n<\/span><\/span> })<\/span>\n<\/span><\/span> }<\/span> else<\/span> {<\/span>\n<\/span><\/span> \/\/ \u4e0d\u4f7f\u7528\u9009\u4e3e\uff0c\u76f4\u63a5\u542f\u52a8<\/span>\n<\/span><\/span> run<\/span>(<\/span>context<\/span>.<\/span>TODO<\/span>(),<\/span> controllerContext<\/span>)<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> <-<\/span>stopCh<\/span>\n<\/span><\/span> return<\/span> nil<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                3.4 \u542f\u52a8\u63a7\u5236\u5668<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ StartControllers \u542f\u52a8\u6240\u6709\u63a7\u5236\u5668<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/controllermanager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> StartControllers<\/span>(<\/span>ctx<\/span> context<\/span>.<\/span>Context<\/span>,<\/span> controllerCtx<\/span> ControllerContext<\/span>,<\/span>\n<\/span><\/span> controllers<\/span> map<\/span>[<\/span>string<\/span>]<\/span>InitFunc<\/span>,<\/span> unsecuredMux<\/span> *<\/span>mux<\/span>.<\/span>PathRecorderMux<\/span>)<\/span> error<\/span> {<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u542f\u52a8\u6240\u6709\u63a7\u5236\u5668<\/span>\n<\/span><\/span> for<\/span> controllerName<\/span>,<\/span> initFn<\/span> :=<\/span> range<\/span> controllers<\/span> {<\/span>\n<\/span><\/span> if<\/span> !<\/span>controllerCtx<\/span>.<\/span>IsControllerEnabled<\/span>(<\/span>controllerName<\/span>)<\/span> {<\/span>\n<\/span><\/span> klog<\/span>.<\/span>Warningf<\/span>(<\/span>"%q is disabled"<\/span>,<\/span> controllerName<\/span>)<\/span>\n<\/span><\/span> continue<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> time<\/span>.<\/span>Sleep<\/span>(<\/span>wait<\/span>.<\/span>Jitter<\/span>(<\/span>controllerCtx<\/span>.<\/span>ComponentConfig<\/span>.<\/span>Generic<\/span>.<\/span>ControllerStartInterval<\/span>.<\/span>Duration<\/span>,<\/span> ControllerStartJitter<\/span>))<\/span>\n<\/span><\/span>\n<\/span><\/span> klog<\/span>.<\/span>V<\/span>(<\/span>1<\/span>).<\/span>Infof<\/span>(<\/span>"Starting %q"<\/span>,<\/span> controllerName<\/span>)<\/span>\n<\/span><\/span> ctrl<\/span>,<\/span> started<\/span>,<\/span> err<\/span> :=<\/span> initFn<\/span>(<\/span>ctx<\/span>,<\/span> controllerCtx<\/span>)<\/span>\n<\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> klog<\/span>.<\/span>Errorf<\/span>(<\/span>"Error starting %q: %v"<\/span>,<\/span> controllerName<\/span>,<\/span> err<\/span>)<\/span>\n<\/span><\/span> return<\/span> err<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span> if<\/span> !<\/span>started<\/span> {<\/span>\n<\/span><\/span> klog<\/span>.<\/span>Warningf<\/span>(<\/span>"Skipping %q"<\/span>,<\/span> controllerName<\/span>)<\/span>\n<\/span><\/span> continue<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> check<\/span> :=<\/span> controllerhealthz<\/span>.<\/span>NamedPingChecker<\/span>(<\/span>controllerName<\/span>)<\/span>\n<\/span><\/span> if<\/span> ctrl<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> if<\/span> healthCheckable<\/span>,<\/span> ok<\/span> :=<\/span> ctrl<\/span>.(<\/span>controller<\/span>.<\/span>Healthz<\/span>);<\/span> ok<\/span> {<\/span>\n<\/span><\/span> check<\/span> =<\/span> controllerhealthz<\/span>.<\/span>NamedHealthChecker<\/span>(<\/span>controllerName<\/span>,<\/span> healthCheckable<\/span>)<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span> klog<\/span>.<\/span>Infof<\/span>(<\/span>"Started %q"<\/span>,<\/span> controllerName<\/span>)<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> return<\/span> nil<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                4. \u63a7\u5236\u5668\u521d\u59cb\u5316<\/h2>\n
                4.1 \u63a7\u5236\u5668\u6ce8\u518c<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ \u63a7\u5236\u5668\u6ce8\u518c\u8868<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/controllermanager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> NewControllerInitializers<\/span>(<\/span>loopMode<\/span> ControllerLoopMode<\/span>)<\/span> map<\/span>[<\/span>string<\/span>]<\/span>InitFunc<\/span> {<\/span>\n<\/span><\/span> controllers<\/span> :=<\/span> map<\/span>[<\/span>string<\/span>]<\/span>InitFunc<\/span>{}<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u5de5\u4f5c\u8d1f\u8f7d\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"deployment"<\/span>]<\/span> =<\/span> startDeploymentController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"replicaset"<\/span>]<\/span> =<\/span> startReplicaSetController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"statefulset"<\/span>]<\/span> =<\/span> startStatefulSetController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"daemonset"<\/span>]<\/span> =<\/span> startDaemonSetController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"job"<\/span>]<\/span> =<\/span> startJobController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"cronjob"<\/span>]<\/span> =<\/span> startCronJobController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ Pod \u76f8\u5173\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"replicationcontroller"<\/span>]<\/span> =<\/span> startReplicationController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"podgc"<\/span>]<\/span> =<\/span> startPodGCController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u670d\u52a1\u76f8\u5173\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"endpoint"<\/span>]<\/span> =<\/span> startEndpointController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"endpointslice"<\/span>]<\/span> =<\/span> startEndpointSliceController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"endpointslicemirroring"<\/span>]<\/span> =<\/span> startEndpointSliceMirroringController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8282\u70b9\u76f8\u5173\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"nodelifecycle"<\/span>]<\/span> =<\/span> startNodeLifecycleController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"nodeipam"<\/span>]<\/span> =<\/span> startNodeIpamController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"ttl"<\/span>]<\/span> =<\/span> startTTLController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u5b58\u50a8\u76f8\u5173\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"persistentvolume-binder"<\/span>]<\/span> =<\/span> startPersistentVolumeBinderController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"attachdetach"<\/span>]<\/span> =<\/span> startAttachDetachController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"persistentvolume-expander"<\/span>]<\/span> =<\/span> startVolumeExpandController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"pvc-protection"<\/span>]<\/span> =<\/span> startPVCProtectionController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"pv-protection"<\/span>]<\/span> =<\/span> startPVProtectionController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u547d\u540d\u7a7a\u95f4\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"namespace"<\/span>]<\/span> =<\/span> startNamespaceController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ ServiceAccount \u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"serviceaccount"<\/span>]<\/span> =<\/span> startServiceAccountController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"serviceaccount-token"<\/span>]<\/span> =<\/span> startServiceAccountTokenController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8d44\u6e90\u914d\u989d\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"resourcequota"<\/span>]<\/span> =<\/span> startResourceQuotaController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u5783\u573e\u56de\u6536\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"garbagecollector"<\/span>]<\/span> =<\/span> startGarbageCollectorController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ TTL \u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"ttl-after-finished"<\/span>]<\/span> =<\/span> startTTLAfterFinishedController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8bc1\u4e66\u63a7\u5236\u5668<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"csrapproving"<\/span>]<\/span> =<\/span> startCSRApprovingController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"csrcleaner"<\/span>]<\/span> =<\/span> startCSRCleanerController<\/span>\n<\/span><\/span> controllers<\/span>[<\/span>"csrsigning"<\/span>]<\/span> =<\/span> startCSRSigningController<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u5176\u4ed6\u63a7\u5236\u5668...<\/span>\n<\/span><\/span>\n<\/span><\/span> return<\/span> controllers<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                4.2 \u63a7\u5236\u5668\u521d\u59cb\u5316\u793a\u4f8b<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ Deployment \u63a7\u5236\u5668\u521d\u59cb\u5316<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/apps.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> startDeploymentController<\/span>(<\/span>ctx<\/span> context<\/span>.<\/span>Context<\/span>,<\/span> controllerContext<\/span> ControllerContext<\/span>)<\/span> (<\/span>controller<\/span>.<\/span>Interface<\/span>,<\/span> bool<\/span>,<\/span> error<\/span>)<\/span> {<\/span>\n<\/span><\/span> dc<\/span>,<\/span> err<\/span> :=<\/span> deployment<\/span>.<\/span>NewDeploymentController<\/span>(<\/span>\n<\/span><\/span> controllerContext<\/span>.<\/span>InformerFactory<\/span>.<\/span>Apps<\/span>().<\/span>V1<\/span>().<\/span>Deployments<\/span>(),<\/span>\n<\/span><\/span> controllerContext<\/span>.<\/span>InformerFactory<\/span>.<\/span>Apps<\/span>().<\/span>V1<\/span>().<\/span>ReplicaSets<\/span>(),<\/span>\n<\/span><\/span> controllerContext<\/span>.<\/span>InformerFactory<\/span>.<\/span>Core<\/span>().<\/span>V1<\/span>().<\/span>Pods<\/span>(),<\/span>\n<\/span><\/span> controllerContext<\/span>.<\/span>ClientBuilder<\/span>.<\/span>ClientOrDie<\/span>(<\/span>"deployment-controller"<\/span>),<\/span>\n<\/span><\/span> )<\/span>\n<\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> return<\/span> nil<\/span>,<\/span> true<\/span>,<\/span> fmt<\/span>.<\/span>Errorf<\/span>(<\/span>"error creating Deployment controller: %v"<\/span>,<\/span> err<\/span>)<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> go<\/span> dc<\/span>.<\/span>Run<\/span>(<\/span>ctx<\/span>,<\/span> int<\/span>(<\/span>controllerContext<\/span>.<\/span>ComponentConfig<\/span>.<\/span>DeploymentController<\/span>.<\/span>ConcurrentDeploymentSyncs<\/span>))<\/span>\n<\/span><\/span>\n<\/span><\/span> return<\/span> nil<\/span>,<\/span> true<\/span>,<\/span> nil<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                5. SharedInformerFactory<\/h2>\n
                5.1 Informer \u5de5\u5382\u7ed3\u6784<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ SharedInformerFactory \u521b\u5efa<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/controllermanager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> CreateControllerContext<\/span>(<\/span>c<\/span> *<\/span>config<\/span>.<\/span>CompletedConfig<\/span>,<\/span> ...<\/span>)<\/span> (<\/span>ControllerContext<\/span>,<\/span> error<\/span>)<\/span> {<\/span>\n<\/span><\/span> \/\/ \u521b\u5efa SharedInformerFactory<\/span>\n<\/span><\/span> sharedInformers<\/span> :=<\/span> informers<\/span>.<\/span>NewSharedInformerFactory<\/span>(<\/span>\n<\/span><\/span> versionedClient<\/span>,<\/span>\n<\/span><\/span> ResyncPeriod<\/span>(<\/span>c<\/span>)(),<\/span>\n<\/span><\/span> )<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u521b\u5efa Metadata Informer (\u7528\u4e8e GC)<\/span>\n<\/span><\/span> metadataInformers<\/span> :=<\/span> metadatainformers<\/span>.<\/span>NewSharedInformerFactory<\/span>(<\/span>\n<\/span><\/span> metadataClient<\/span>,<\/span>\n<\/span><\/span> ResyncPeriod<\/span>(<\/span>c<\/span>)(),<\/span>\n<\/span><\/span> )<\/span>\n<\/span><\/span>\n<\/span><\/span> return<\/span> ControllerContext<\/span>{<\/span>\n<\/span><\/span> InformerFactory<\/span>:<\/span> sharedInformers<\/span>,<\/span>\n<\/span><\/span> ObjectOrMetadataInformerFactory<\/span>:<\/span> controller<\/span>.<\/span>NewInformerFactory<\/span>(<\/span>\n<\/span><\/span> sharedInformers<\/span>,<\/span>\n<\/span><\/span> metadataInformers<\/span>,<\/span>\n<\/span><\/span> ),<\/span>\n<\/span><\/span> ...<\/span>\n<\/span><\/span> },<\/span> nil<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                5.2 Informer \u542f\u52a8<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ \u542f\u52a8 Informers<\/span>\n<\/span><\/span>\/\/ cmd\/kube-controller-manager\/app\/controllermanager.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> (<\/span>ctx<\/span> ControllerContext<\/span>)<\/span> StartInformers<\/span>(<\/span>stopCh<\/span> <-<\/span>chan<\/span> struct<\/span>{})<\/span> {<\/span>\n<\/span><\/span> ctx<\/span>.<\/span>InformerFactory<\/span>.<\/span>Start<\/span>(<\/span>stopCh<\/span>)<\/span>\n<\/span><\/span> ctx<\/span>.<\/span>ObjectOrMetadataInformerFactory<\/span>.<\/span>Start<\/span>(<\/span>stopCh<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u7b49\u5f85\u7f13\u5b58\u540c\u6b65<\/span>\n<\/span><\/span>func<\/span> (<\/span>ctx<\/span> ControllerContext<\/span>)<\/span> WaitForInformersSync<\/span>()<\/span> {<\/span>\n<\/span><\/span> ctx<\/span>.<\/span>InformerFactory<\/span>.<\/span>WaitForCacheSync<\/span>(<\/span>ctx<\/span>.<\/span>Stop<\/span>)<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                6. Leader Election<\/h2>\n
                6.1 \u9009\u4e3e\u673a\u5236<\/h3>\n
                graph TB\n subgraph leader_election[\"Leader Election\"]\n LOCK[\"Lease Lock(kube-system\/kube-controller-manager)\"]\n CM1[\"Controller Manager 1Leader\"]\n CM2[\"Controller Manager 2Standby\"]\n CM3[\"Controller Manager 3Standby\"]\n end\n\n CM1 -->|\"\u6301\u6709\u9501\"| LOCK\n CM2 -.->|\"\u5c1d\u8bd5\u83b7\u53d6\"| LOCK\n CM3 -.->|\"\u5c1d\u8bd5\u83b7\u53d6\"| LOCK\n<\/div>\n\n
                6.2 \u9009\u4e3e\u914d\u7f6e<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ Leader Election \u914d\u7f6e<\/span>\n<\/span><\/span>\/\/ staging\/src\/k8s.io\/component-base\/config\/types.go<\/span>\n<\/span><\/span>\n<\/span><\/span>type<\/span> LeaderElectionConfiguration<\/span> struct<\/span> {<\/span>\n<\/span><\/span> \/\/ \u662f\u5426\u542f\u7528\u9009\u4e3e<\/span>\n<\/span><\/span> LeaderElect<\/span> bool<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u9501\u7684\u6301\u7eed\u65f6\u95f4<\/span>\n<\/span><\/span> LeaseDuration<\/span> metav1<\/span>.<\/span>Duration<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u7eed\u7ea6\u622a\u6b62\u65f6\u95f4<\/span>\n<\/span><\/span> RenewDeadline<\/span> metav1<\/span>.<\/span>Duration<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u91cd\u8bd5\u95f4\u9694<\/span>\n<\/span><\/span> RetryPeriod<\/span> metav1<\/span>.<\/span>Duration<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8d44\u6e90\u9501\u7c7b\u578b<\/span>\n<\/span><\/span> ResourceLock<\/span> string<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8d44\u6e90\u540d\u79f0<\/span>\n<\/span><\/span> ResourceName<\/span> string<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u8d44\u6e90\u547d\u540d\u7a7a\u95f4<\/span>\n<\/span><\/span> ResourceNamespace<\/span> string<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>\/\/ \u9ed8\u8ba4\u503c<\/span>\n<\/span><\/span>var<\/span> defaultLeaderElectionConfiguration<\/span> =<\/span> LeaderElectionConfiguration<\/span>{<\/span>\n<\/span><\/span> LeaderElect<\/span>:<\/span> true<\/span>,<\/span>\n<\/span><\/span> LeaseDuration<\/span>:<\/span> metav1<\/span>.<\/span>Duration<\/span>{<\/span>Duration<\/span>:<\/span> 15<\/span> *<\/span> time<\/span>.<\/span>Second<\/span>},<\/span>\n<\/span><\/span> RenewDeadline<\/span>:<\/span> metav1<\/span>.<\/span>Duration<\/span>{<\/span>Duration<\/span>:<\/span> 10<\/span> *<\/span> time<\/span>.<\/span>Second<\/span>},<\/span>\n<\/span><\/span> RetryPeriod<\/span>:<\/span> metav1<\/span>.<\/span>Duration<\/span>{<\/span>Duration<\/span>:<\/span> 2<\/span> *<\/span> time<\/span>.<\/span>Second<\/span>},<\/span>\n<\/span><\/span> ResourceLock<\/span>:<\/span> "leases"<\/span>,<\/span>\n<\/span><\/span> ResourceName<\/span>:<\/span> "kube-controller-manager"<\/span>,<\/span>\n<\/span><\/span> ResourceNamespace<\/span>:<\/span> "kube-system"<\/span>,<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                6.3 \u9009\u4e3e\u5b9e\u73b0<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                \/\/ \u8fd0\u884c\u9009\u4e3e<\/span>\n<\/span><\/span>\/\/ staging\/src\/k8s.io\/client-go\/tools\/leaderelection\/leaderelection.go<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> RunOrDie<\/span>(<\/span>ctx<\/span> context<\/span>.<\/span>Context<\/span>,<\/span> lec<\/span> LeaderElectionConfig<\/span>)<\/span> {<\/span>\n<\/span><\/span> le<\/span>,<\/span> err<\/span> :=<\/span> NewLeaderElector<\/span>(<\/span>lec<\/span>)<\/span>\n<\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> {<\/span>\n<\/span><\/span> panic<\/span>(<\/span>err<\/span>)<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span> le<\/span>.<\/span>Run<\/span>(<\/span>ctx<\/span>)<\/span>\n<\/span><\/span>}<\/span>\n<\/span><\/span>\n<\/span><\/span>func<\/span> (<\/span>le<\/span> *<\/span>LeaderElector<\/span>)<\/span> Run<\/span>(<\/span>ctx<\/span> context<\/span>.<\/span>Context<\/span>)<\/span> {<\/span>\n<\/span><\/span> defer<\/span> func<\/span>()<\/span> {<\/span>\n<\/span><\/span> le<\/span>.<\/span>config<\/span>.<\/span>Callbacks<\/span>.<\/span>OnStoppedLeading<\/span>()<\/span>\n<\/span><\/span> }()<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u5c1d\u8bd5\u83b7\u53d6\u9501<\/span>\n<\/span><\/span> if<\/span> !<\/span>le<\/span>.<\/span>acquire<\/span>(<\/span>ctx<\/span>)<\/span> {<\/span>\n<\/span><\/span> return<\/span>\n<\/span><\/span> }<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u83b7\u53d6\u9501\u6210\u529f\uff0c\u542f\u52a8\u56de\u8c03<\/span>\n<\/span><\/span> ctx<\/span>,<\/span> cancel<\/span> :=<\/span> context<\/span>.<\/span>WithCancel<\/span>(<\/span>ctx<\/span>)<\/span>\n<\/span><\/span> defer<\/span> cancel<\/span>()<\/span>\n<\/span><\/span> go<\/span> le<\/span>.<\/span>config<\/span>.<\/span>Callbacks<\/span>.<\/span>OnStartedLeading<\/span>(<\/span>ctx<\/span>)<\/span>\n<\/span><\/span>\n<\/span><\/span> \/\/ \u7eed\u7ea6\u5faa\u73af<\/span>\n<\/span><\/span> le<\/span>.<\/span>renew<\/span>(<\/span>ctx<\/span>)<\/span>\n<\/span><\/span>}<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                7. \u63a7\u5236\u5668\u5217\u8868<\/h2>\n
                7.1 \u5de5\u4f5c\u8d1f\u8f7d\u63a7\u5236\u5668<\/h3>\n\n \n \n \n \n \n \n \n \n \n 
                \u63a7\u5236\u5668<\/th>\n \u804c\u8d23<\/th>\n \u5173\u8054\u8d44\u6e90<\/th>\n <\/tr>\n <\/thead>\n 
                deployment<\/td>\n Deployment \u7ba1\u7406<\/td>\n Deployment, ReplicaSet<\/td>\n <\/tr>\n 
                replicaset<\/td>\n ReplicaSet \u7ba1\u7406<\/td>\n ReplicaSet, Pod<\/td>\n <\/tr>\n 
                statefulset<\/td>\n StatefulSet \u7ba1\u7406<\/td>\n StatefulSet, Pod, PVC<\/td>\n <\/tr>\n 
                daemonset<\/td>\n DaemonSet \u7ba1\u7406<\/td>\n DaemonSet, Pod<\/td>\n <\/tr>\n 
                job<\/td>\n Job \u7ba1\u7406<\/td>\n Job, Pod<\/td>\n <\/tr>\n 
                cronjob<\/td>\n CronJob \u7ba1\u7406<\/td>\n CronJob, Job<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
                7.2 \u670d\u52a1\u53d1\u73b0\u63a7\u5236\u5668<\/h3>\n\n \n \n \n \n \n \n \n 
                \u63a7\u5236\u5668<\/th>\n \u804c\u8d23<\/th>\n <\/tr>\n <\/thead>\n 
                endpoint<\/td>\n \u7ef4\u62a4 Endpoints<\/td>\n <\/tr>\n 
                endpointslice<\/td>\n \u7ef4\u62a4 EndpointSlice<\/td>\n <\/tr>\n 
                endpointslicemirroring<\/td>\n Endpoints \u5230 EndpointSlice \u955c\u50cf<\/td>\n <\/tr>\n 
                service<\/td>\n Service \u5904\u7406<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
                7.3 \u8282\u70b9\u63a7\u5236\u5668<\/h3>\n\n \n \n \n \n \n \n \n 
                \u63a7\u5236\u5668<\/th>\n \u804c\u8d23<\/th>\n <\/tr>\n <\/thead>\n 
                nodelifecycle<\/td>\n \u8282\u70b9\u751f\u547d\u5468\u671f\u7ba1\u7406<\/td>\n <\/tr>\n 
                nodeipam<\/td>\n \u8282\u70b9 CIDR \u5206\u914d<\/td>\n <\/tr>\n 
                taintmanager<\/td>\n \u6c61\u70b9\u7ba1\u7406<\/td>\n <\/tr>\n 
                ttl<\/td>\n TTL \u7ba1\u7406<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
                7.4 \u5b58\u50a8\u63a7\u5236\u5668<\/h3>\n\n \n \n \n \n \n \n \n \n \n 
                \u63a7\u5236\u5668<\/th>\n \u804c\u8d23<\/th>\n <\/tr>\n <\/thead>\n 
                persistentvolume-binder<\/td>\n PV\/PVC \u7ed1\u5b9a<\/td>\n <\/tr>\n 
                attachdetach<\/td>\n \u5377 Attach\/Detach<\/td>\n <\/tr>\n 
                persistentvolume-expander<\/td>\n \u5377\u6269\u5c55<\/td>\n <\/tr>\n 
                pvc-protection<\/td>\n PVC \u4fdd\u62a4<\/td>\n <\/tr>\n 
                pv-protection<\/td>\n PV \u4fdd\u62a4<\/td>\n <\/tr>\n 
                ephemeral-volume<\/td>\n \u4e34\u65f6\u5377<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
                7.5 \u5176\u4ed6\u63a7\u5236\u5668<\/h3>\n\n \n \n \n \n \n \n \n \n \n 
                \u63a7\u5236\u5668<\/th>\n \u804c\u8d23<\/th>\n <\/tr>\n <\/thead>\n 
                namespace<\/td>\n \u547d\u540d\u7a7a\u95f4\u751f\u547d\u5468\u671f<\/td>\n <\/tr>\n 
                serviceaccount<\/td>\n ServiceAccount \u7ba1\u7406<\/td>\n <\/tr>\n 
                garbagecollector<\/td>\n \u5783\u573e\u56de\u6536<\/td>\n <\/tr>\n 
                resourcequota<\/td>\n \u8d44\u6e90\u914d\u989d<\/td>\n <\/tr>\n 
                horizontalpodautoscaling<\/td>\n HPA<\/td>\n <\/tr>\n 
                disruption<\/td>\n PDB \u7ba1\u7406<\/td>\n <\/tr>\n <\/tbody>\n<\/table>\n
                8. \u914d\u7f6e\u53c2\u6570<\/h2>\n
                8.1 \u901a\u7528\u914d\u7f6e<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                # Controller Manager \u914d\u7f6e\u793a\u4f8b<\/span>\n<\/span><\/span><\/span><\/span>apiVersion<\/span>:<\/span> <\/span>kubecontroller.config.k8s.io\/v1alpha1<\/span>\n<\/span><\/span><\/span><\/span>kind<\/span>:<\/span> <\/span>KubeControllerManagerConfiguration<\/span>\n<\/span><\/span><\/span><\/span>generic<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span># \u5e76\u53d1\u540c\u6b65\u6570<\/span>\n<\/span><\/span><\/span> <\/span>controllers<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>- "*"<\/span> <\/span># \u542f\u7528\u6240\u6709\u63a7\u5236\u5668<\/span>\n<\/span><\/span><\/span>\n<\/span><\/span><\/span> <\/span># \u6216\u7981\u7528\u7279\u5b9a\u63a7\u5236\u5668<\/span>\n<\/span><\/span><\/span> <\/span># controllers:<\/span>\n<\/span><\/span><\/span> <\/span># - "*"<\/span>\n<\/span><\/span><\/span> <\/span># - "-bootstrapsigner"<\/span>\n<\/span><\/span><\/span>\n<\/span><\/span><\/span> <\/span># Leader Election<\/span>\n<\/span><\/span><\/span> <\/span>leaderElection<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>leaderElect<\/span>:<\/span> <\/span>true<\/span>\n<\/span><\/span><\/span> <\/span>leaseDuration<\/span>:<\/span> <\/span>15s<\/span>\n<\/span><\/span><\/span> <\/span>renewDeadline<\/span>:<\/span> <\/span>10s<\/span>\n<\/span><\/span><\/span> <\/span>retryPeriod<\/span>:<\/span> <\/span>2s<\/span>\n<\/span><\/span><\/span> <\/span>resourceLock<\/span>:<\/span> <\/span>leases<\/span>\n<\/span><\/span><\/span> <\/span>resourceName<\/span>:<\/span> <\/span>kube-controller-manager<\/span>\n<\/span><\/span><\/span> <\/span>resourceNamespace<\/span>:<\/span> <\/span>kube-system<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                8.2 \u63a7\u5236\u5668\u7279\u5b9a\u914d\u7f6e<\/h3>\n\n\n\n
                \n 
                \n 
                \n <\/span>\n <\/figcaption>\n 
                # \u5404\u63a7\u5236\u5668\u914d\u7f6e<\/span>\n<\/span><\/span><\/span><\/span>deploymentController<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>concurrentDeploymentSyncs<\/span>:<\/span> <\/span>5<\/span>\n<\/span><\/span><\/span>\n<\/span><\/span><\/span><\/span>replicaSetController<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>concurrentRSSyncs<\/span>:<\/span> <\/span>5<\/span>\n<\/span><\/span><\/span>\n<\/span><\/span><\/span><\/span>endpointController<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>concurrentEndpointSyncs<\/span>:<\/span> <\/span>5<\/span>\n<\/span><\/span><\/span>\n<\/span><\/span><\/span><\/span>serviceAccountController<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>concurrentSATokenSyncs<\/span>:<\/span> <\/span>5<\/span>\n<\/span><\/span><\/span> <\/span>serviceAccountKeyFile<\/span>:<\/span> <\/span>\/etc\/kubernetes\/pki\/sa.key<\/span>\n<\/span><\/span><\/span>\n<\/span><\/span><\/span><\/span>garbageCollectorController<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>concurrentGCSyncs<\/span>:<\/span> <\/span>20<\/span>\n<\/span><\/span><\/span> <\/span>enableGarbageCollector<\/span>:<\/span> <\/span>true<\/span>\n<\/span><\/span><\/span>\n<\/span><\/span><\/span><\/span>nodeLifecycleController<\/span>:<\/span>\n<\/span><\/span><\/span> <\/span>podEvictionTimeout<\/span>:<\/span> <\/span>5m0s<\/span>\n<\/span><\/span><\/span> <\/span>nodeMonitorGracePeriod<\/span>:<\/span> <\/span>40s<\/span>\n<\/span><\/span><\/span> <\/span>nodeStartupGracePeriod<\/span>:<\/span> <\/span>1m0s<\/span><\/span><\/span><\/code><\/pre><\/div>\n <\/figure>\n<\/div>\n
                \u5c0f\u7ed3<\/h2>\n
                \u672c\u6587\u4ecb\u7ecd\u4e86 Controller Manager \u7684\u6574\u4f53\u67b6\u6784\uff1a<\/p>"},{"title":"Controller Manager \u4e0e Controller \u6846\u67b6\u6df1\u5ea6\u89e3\u6790","link":"https:\/\/cloudnative.lei6393.com\/volcano\/05-controllers-analysis\/01-controller-framework\/","pubDate":"Mon, 01 Jan 0001 00:00:00 +0000","guid":"https:\/\/cloudnative.lei6393.com\/volcano\/05-controllers-analysis\/01-controller-framework\/","description":"
                1. \u6982\u8ff0<\/h2>\n
                Volcano Controller Manager \u662f Volcano \u7cfb\u7edf\u7684\u6838\u5fc3\u7ec4\u4ef6\u4e4b\u4e00\uff0c\u8d1f\u8d23\u7ba1\u7406\u6240\u6709\u81ea\u5b9a\u4e49\u8d44\u6e90 (CRD) \u7684\u751f\u547d\u5468\u671f\u3002\u5b83\u91c7\u7528\u7ecf\u5178\u7684 Kubernetes Controller \u6a21\u5f0f\uff0c\u901a\u8fc7 Informer \u76d1\u542c + Work Queue \u5904\u7406 + \u72b6\u6001\u673a\u9a71\u52a8<\/strong> \u7684\u65b9\u5f0f\uff0c\u5b9e\u73b0\u4e86\u5bf9 Job\u3001Queue\u3001PodGroup\u3001JobFlow \u7b49\u8d44\u6e90\u7684\u81ea\u52a8\u5316\u7ba1\u7406\u3002<\/p>"}]}}