ylonkar/pod-dependency-init-container

Pod依赖初始化容器

该初始化容器可作为Kubernetes Pod的初始化容器，用于指定Pod对其他Pod的依赖关系。它会检查当前命名空间内是否存在处于运行状态的指定标签的Pod，若找到则成功退出，否则在超时后失败退出。

使用方法

可通过https://github.com/yogeshlonkar/pod-dependency-init-container/packages%E6%88%96Docker Hub获取镜像：https://hub.docker.com/r/ylonkar/pod-dependency-init-container%E3%80%81https://github.com/yogeshlonkar/pod-dependency-init-container/packages/***%E3%80%82

配置参数

示例用法

yaml
spec:
  containers:
  ...
  serviceAccountName: {{ .Values.serviceAccount }} # 可选
  initContainers:
  - name: pod-dependency
    image: ylonkar/pod-dependency-init-container:1.0.2
    env:
    - name: POD_LABELS
      value: app=nodeapp,name=mongo-1
    - name: MAX_RETRY
      value: "10"
    - name: RETRY_TIME_OUT
      value: "5000"

RBAC配置

若启用RBAC，该容器需要对pods资源的get、list、watch权限。可通过以下YAML配置：

yaml
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: {{ .Values.serviceAccount }}
rules:
  - apiGroups:
      - ""
    resources:
      - pods
      - services
      - endpoints
    verbs:
      - get
      - list
      - watch
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ .Values.serviceAccount }}
  namespace: {{ .Values.namespace }}
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: system:serviceaccount:{{ .Values.serviceAccount }}:default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: {{ .Values.serviceAccount }}
subjects:
- kind: ServiceAccount
  name: {{ .Values.serviceAccount }}
  namespace: {{ .Values.namespace }}

待办事项

• 添加测试！
• 集成到travis-ci