$ yum install bridge-utils

[root@t-middle01 ~]# brctl addbr mybr
[root@t-middle01 ~]# brctl show
bridge name     bridge id               STP enabled     interfaces
mybr            8000.000000000000       no

[root@t-middle01 ~]# ip link add veth0 type veth peer name veth1
[root@t-middle01 ~]# ifconfig veth0 1.2.3.100/24 up
[root@t-middle01 ~]# ifconfig veth1 1.2.3.200/24 up

]# docker network ls
NETWORK ID          NAME                DRIVER              SCOPE
2595499e1c4c        bridge              bridge              local
3440b4c385f2        host                host                local
6398e6ab94d1        none                null                local

# brctl show
bridge name     bridge id               STP enabled     interfaces
docker0         8000.02421e0d1279       no              

# docker run --name busybox -itd busybox
e10df4d10de378d6b2db16d9ea5a3f9fb62294d2b9ba89df08f549c37b2769a6
# brctl show
bridge name     bridge id               STP enabled     interfaces
docker0         8000.02421e0d1279       no              veth066ee4f

[root@paas-m-k8s-master-1 ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
。。。。
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0

curl -O -L  https://github.com/projectcalico/calicoctl/releases/download/v3.18.4/calicoctl
chmod +x calicoctl
cp calicoctl /usr/local/bin/

cat  /etc/cni/net.d/10-calico.conflist

[root@paas-m-k8s-master-1 ~]# calicoctl get ippool
NAME                  CIDR            SELECTOR
default-ipv4-ippool   100.64.0.0/10   all()

apiVersion: projectcalico.org/v3
kind: IPPool
metadata:
  name: redis-ippool1
spec:
  blockSize: 31
  cidr: 11.11.11.0/30
  ipipMode: Always
  natOutgoing: true

apiVersion: projectcalico.org/v3
kind: IPPool
metadata:
  name: redis-ippool1
spec:
  blockSize: 31
  cidr: 11.11.11.4/31
  ipipMode: Always
  natOutgoing: true

[root@paas-m-k8s-master-1 calico]# calicoctl apply -f ippool1.yaml
[root@paas-m-k8s-master-1 calico]# calicoctl apply -f ippool2.yaml
[root@paas-m-k8s-master-1 calico]# calicoctl get ippool
NAME                  CIDR            SELECTOR
default-ipv4-ippool   100.64.0.0/10   all()
redis-ippool1         11.11.11.0/30   all()
redis-ippool2         11.11.11.4/31   all()

apiVersion: apps/v1
kind: StatefulSet
metadata:
  namespace: redis-test
  name: redis-cluster-static-ip
spec:
  serviceName: redis-cluster-static-ip
  replicas: 6
  selector:
    matchLabels:
      app: redis-cluster-static-ip
  template:
    metadata:
      labels:
        app: redis-cluster-static-ip
      # 增加这个注解
      annotations:
        #可以配置多个，逗号隔开
        "cni.projectcalico.org/ipv4pools": "[\"redis-ippool1\",\"redis-ippool2\"]"
    spec:
      containers:
        - name: redis
          image: redis:5.0.5-alpine
          ports:
            - containerPort: 6379
              name: client
            - containerPort: 16379
              name: gossport
          # 不再使用fix-ip.sh
          command: ["redis-server", "/data/conf/redis.conf"]
          ### 就绪指针探测
          readinessProbe:
            exec:
              command:
              - sh
              - -c
              - "redis-cli -h $(hostname) ping"
            initialDelaySeconds: 15
            timeoutSeconds: 5
          livenessProbe:
            exec:
              command:
              - sh
              - -c
              - "redis-cli -h $(hostname) ping"
            initialDelaySeconds: 20
            periodSeconds: 3

          volumeMounts:
            - name: config
              mountPath: /data/conf
              readOnly: false
            - name: data
              mountPath: /data/data
              readOnly: false
      volumes:
        - name: config
          configMap:
            name: redis-config
            defaultMode: 0755
  volumeClaimTemplates:
    - metadata:
        name: data
        annotations:
          volume.beta.kubernetes.io/storage-class: "nfs-client"
      spec:
        accessModes:
          - ReadWriteOnce
        resources:
          requests:
            storage: 2Gi

[root@paas-m-k8s-master-1 calico]# kubectl apply -f redis-sts-ippool.yaml
statefulset.apps/redis-cluster created

kubectl -n redis-test exec -it redis-cluster-static-ip-0 -- redis-cli --cluster create --cluster-replicas 1 -a 123456 $((kubectl -n redis-test get pods -l app=redis-cluster-static-ip -o jsonpath='{range.items[*]}{.status.podIP}:6379 ') | awk '{print $1" "$2" "$3" "$4" "$5" "$6" "}')

[root@paas-m-k8s-master-1 calico]# kc -n redis-test delete sts redis-cluster-static-ip
[root@paas-m-k8s-master-1 calico]# kc -n redis-test get pod
[root@paas-m-k8s-master-1 calico]# kc apply -f redis-sts-ippool.yaml

<!DOCTYPE html>
<html>
<head>
<title>111111</title>
</head>
<body>
<h1>nghinx-11111111111111</h1>
</body>
</html>

[root@paas-m-k8s-master-1 yaml]# kubectl -n nginx get pod -Lapp
NAME                                 READY   STATUS    RESTARTS   AGE     APP
nginx-deployment1-547fb748cf-z22p7   1/1     Running   0          5m52s   nginx
[root@paas-m-k8s-master-1 yaml]# kubectl -n nginx label pod nginx-deployment1-547fb748cf-z22p7 app=nginx2 --overwrite
pod/nginx-deployment1-547fb748cf-z22p7 labeled

selector:
  app: nginx

GRUB_CMDLINE_LINUX="crashkernel=auto net.ifnames=0 biosdevname=0 intel_pstate=disable cgroup.memory=nokmem"

git clone https://github.com/prometheus-operator/kube-prometheus.git
git checkout release-0.6

...
version: v2.20.0
retention: 3d
storage:
  volumeClaimTemplate:
    spec:
      storageClassName: nfs-client
      resources:
        requests:
          storage: 5Gi

volumes:
# - emptyDir: {}
#   name: grafana-storage
- name: grafana-storage
  persistentVolumeClaim:
    claimName: grafana-data

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: grafana-data
  namespace: monitoring
  annotations:
    volume.beta.kubernetes.io/storage-class: nfs-client
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 5Gi
  storageClassName: nfs-client

kubectl apply -f manifests/setup
until kubectl get servicemonitors --all-namespaces ; do date; sleep 1; echo ""; done
kubectl apply -f manifests/

apiVersion: v1
kind: ServiceAccount
metadata:
  name: demo-account
  namespace: demo

# kubectl -n demo get secret
No resources found in demo namespace.

apiVersion: v1
kind: Secret
metadata:
  name: demo-account-secret
  namespace: demo
  annotations:
    kubernetes.io/service-account.name: "demo-account"
type: kubernetes.io/service-account-token

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: demo-role
  namespace: demo
rules:
- apiGroups: [""]
  resources: ["services", "configmaps", "secrets", "pods"]
  verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]
- apiGroups: ["apps"]
  resources: ["deployments"]
  verbs: ["get", "list", "watch", "create", "delete", "update", "patch"]

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: demo-rolebinding
  namespace: demo
subjects:
- kind: ServiceAccount
  name: demo-account
  namespace: demo
roleRef:
  kind: Role
  name: demo-role
  apiGroup: rbac.authorization.k8s.io

cp ~/.kube/config demo.config

echo "xxx" | base64 -d 

apiVersion: v1
kind: Config

clusters:
- cluster:
    certificate-authority-data: 都一样，不用改
    server: 都一样，不用改
  name: demo-cluster改一下，和业务相关命名


users:
- name: demo 你的用户名
  user:
    token: eyJhbGciOiJSUzI1NiIsImtpZCI6IklaWG5QekZrSzM4cXkyZ2NPRFRxX3hxYUVuZ01vaTZ1NFZOZUxtUVBSeVUifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJkZW1vIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6ImRlbW8tYWNjb3VudC1zZWNyZXQiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoiZGVtby1hY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiMWQwYmY1M2EtOTUwNS00N2E3LWE5OTItYjA4YzdiMTc2Yjc2Iiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50OmRlbW86ZGVtby1hY2NvdW50In0.tsH_CoGD_p7Rn1MMwEJrW-PEdUYh7H6KnS6QXxQzl4DMN3wWBA_jeiuir-4I0WhTjS5TQ_0OMtRtsaWcvL1XuvencUtAZFygqpsA20AHLeEsyFAvwmb_2GeInV8a-BFchcQUp8IcHEv2GXEdP5BGlK6zfroEK1cfPbaM-ITV82HFmVjn8eCynq0EON5EZATz4WO7ewnX2mEg7mh_aPWiW7_StjzZrPtvbbkA8ef1fpf67Ou9wym70TkEmovgYcTfBecY-OHrCkSuSStQilSQ5wi0rbsPDH-v8Z2SckXrCqO9kmqDBk-2d_65BK5oM0aTD7VFlxeWvRXXx_NjBCNh6A
    
    
    
contexts:
- context:
    cluster: demo-cluster 和上面改的名要一致
    namespace: demo 你的ns
    user: demo 和上面改的名要一致
  name: demo-context 改一下，和业务相关命名

export KUBECONFIG=/root/.kube/config:/root/.kube/demo.config

kubectl --context demo-context get pod

# 所有的备份
kubectl -n velero get backups
# 查看具体某个备份的状态
kubectl -n velero describe backups backup-all-20230409170058

velero get backups

kubectl -n velero edit deploy velero

velero backup logs s02136

kubectl -n velero logs velero-7c69c567cd-k58zl

# kubectl -n velero get downloadrequest
NAME                                                             AGE
s02136-6b3dc423-69d5-4959-b7e9-cd74a45e4ac0                      34m
s02136-fb567675-d0d0-4d41-b26b-303a407d3374                      37m

Warning  FailedScheduling  <unknown>  default-scheduler  0/5 nodes are available: 1 node(s) had taints that the pod didn't tolerate, 1 node(s) were unschedulable, 3 node(s) had volume node affinity conflict.

kubectl -n kubesphere-monitoring-system get pod prometheus-k8s-0 -o yaml

volumes:
 - name: prometheus-k8s-db
   persistentVolumeClaim:
     claimName: prometheus-k8s-db-prometheus-k8s-0

kubectl get pv pvc-15224634-6105-4716-a4b7-5e2fd6689db8 -oyaml

nodeAffinity:
   required:
     nodeSelectorTerms:
     - matchExpressions:
       - key: kubernetes.io/hostname
         operator: In
         values:
         - str-paas-k8s-0-node-2