- Kubernetes version: 1.9+
- Kubectl has been installed on the client
- You can use
kubectl auth can-i
if you have authorization for the following operations:- create secrets
- create deployments
- create configmaps
- create namespaces
- create StatefulSet
- create Service
Usage:
./install.sh -m NodePort -s mysql -n dongtai-iast
m: access mode(mode), optional: NodePort
LoadBalancer
, default: NodePort
s: skipped resources(skip), optional: mysql
redis
mysql,redis
, default: don't skip
n: specify the namespace, default: dongtai-iast
If you want to modify the configuration of mysql and Redis, manually modify the configuration manifest/4.deploy-iast-server.yml
The top part of [mysql]
and redis
.
Note: Assuming that
mysql
andredis
can be configured for production, this deployment scheme can be used for production deployment.
kubectl get nodes -o wide | awk {'print $1" " $2 " " $7'} | column -t
kubectl get svc dongtai-web-pub-svc -n dongtai-iast -o=jsonpath='{.spec.ports[0].nodePort}'
kubectl get svc dongtai-engine-pub-svc -n dongtai-iast -o=jsonpath='{.spec.ports[0].nodePort}')
http://${NodeIP}:${PORT}
kubectl get svc dongtai-web-pub-svc dongtai-engine-pub-svc -n dongtai-iast
kubectl delete namespace ${YourNamespace}