{"id":24155248,"url":"https://github.com/denverdino/k8s-for-docker-desktop","last_synced_at":"2025-05-13T16:11:36.161Z","repository":{"id":37318835,"uuid":"123785626","full_name":"denverdino/k8s-for-docker-desktop","owner":"denverdino","description":"为Docker Desktop for Mac/Windows开启Kubernetes和Istio。","archived":false,"fork":false,"pushed_at":"2025-03-07T07:13:27.000Z","size":2689,"stargazers_count":5023,"open_issues_count":35,"forks_count":1125,"subscribers_count":136,"default_branch":"master","last_synced_at":"2025-05-12T16:08:36.069Z","etag":null,"topics":["china","docker","helm","istio","k8s","kubernetes","mac","windows"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/denverdino.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2018-03-04T12:18:16.000Z","updated_at":"2025-05-07T08:00:06.000Z","dependencies_parsed_at":"2024-01-14T06:53:33.307Z","dependency_job_id":"c60d2465-245d-4dd6-9398-4efbf8009de8","html_url":"https://github.com/denverdino/k8s-for-docker-desktop","commit_stats":{"total_commits":130,"total_committers":39,"mean_commits":"3.3333333333333335","dds":0.3846153846153846,"last_synced_commit":"e5a7c84a75541a14d46abad0b05b5059c6ff8efc"},"previous_names":["denverdino/k8s-for-docker-desktop","aliyuncontainerservice/k8s-for-docker-desktop"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denverdino%2Fk8s-for-docker-desktop","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denverdino%2Fk8s-for-docker-desktop/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denverdino%2Fk8s-for-docker-desktop/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/denverdino%2Fk8s-for-docker-desktop/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/denverdino","download_url":"https://codeload.github.com/denverdino/k8s-for-docker-desktop/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253980055,"owners_count":21994042,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["china","docker","helm","istio","k8s","kubernetes","mac","windows"],"created_at":"2025-01-12T13:00:42.724Z","updated_at":"2025-05-13T16:11:36.064Z","avatar_url":"https://github.com/denverdino.png","language":"PowerShell","funding_links":[],"categories":["PowerShell","PowerShell（12）"],"sub_categories":[],"readme":"# Docker Desktop for Mac/Windows 开启 Kubernetes\n\n中文 | [English](README_en.md)\n\n\n说明: \n\n *  **注意** 请阅读并遵守 [docker subscription service agreement](https://www.docker.com/legal/docker-subscription-service-agreement/) , 如果不接受 Docker Desktop 的使用条款，建议使用 [Minikube](https://minikube.sigs.k8s.io/docs/) 等其他开源工具。\n \n\n\n* 需安装 Docker Desktop 的 Mac 或者 Windows 版本\n* 当前 master 分支已经在 Docker for Mac/Windows 4.37.0 (包含 Docker 27.4.0 和 Kubernetes v1.31.4) 版本测试通过\n* 如果需要测试其他版本，请查看 Docker Desktop版本，Docker -\u003e About Docker Desktop\n  ![about](images/about.png)\n  * 如Kubernetes版本为 v1.31.4, 请使用下面命令切换 [v1.31.4 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.31.4) ```git checkout v1.31.4```\n  * 如Kubernetes版本为 v1.30.5, 请使用下面命令切换 [v1.30.5 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.30.5) ```git checkout v1.30.5```\n  * 如Kubernetes版本为 v1.30.2, 请使用下面命令切换 [v1.30.2 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.30.2) ```git checkout v1.30.2```\n  * 如Kubernetes版本为 v1.29.2, 请使用下面命令切换 [v1.29.2 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.29.2) ```git checkout v1.29.2```\n  * 如Kubernetes版本为 v1.29.1, 请使用下面命令切换 [v1.29.1 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.29.1) ```git checkout v1.29.1```\n  * 如Kubernetes版本为 v1.28.2, 请使用下面命令切换 [v1.28.2 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.28.2) ```git checkout v1.28.2```\n  * 如Kubernetes版本为 v1.27.2, 请使用下面命令切换 [v1.27.2 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.27.2) ```git checkout v1.27.2```\n  * 如Kubernetes版本为 v1.25.9, 请使用下面命令切换 [v1.25.9 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.25.9) ```git checkout v1.25.9```\n  * 如Kubernetes版本为 v1.25.4, 请使用下面命令切换 [v1.25.4 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.25.4) ```git checkout v1.25.4```\n  * 如Kubernetes版本为 v1.25.2, 请使用下面命令切换 [v1.25.2 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.25.2) ```git checkout v1.25.2```\n  * 如Kubernetes版本为 v1.25.0, 请使用下面命令切换 [v1.25.0 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.25.0) ```git checkout v1.25.0```\n  * 如Kubernetes版本为 v1.24.2, 请使用下面命令切换 [v1.24.2 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.24.2) ```git checkout v1.24.2```\n  * 如Kubernetes版本为 v1.24.0, 请使用下面命令切换 [v1.24.0 分支](https://github.com/AliyunContainerService/k8s-for-docker-desktop/tree/v1.24.0) ```git checkout v1.24.0```\n  \n\n注：\n\n* 如果发现K8s版本尚未提供，您可以修改```images.properties```文件指明所需镜像版本，并欢迎提交 Pull Request\n  * 通过如下命令可以获取指定K8s版本所需镜像 ```kubeadm config images list --kubernetes-version v1.30.2```\n  * 可以访问 Docker Hub 获取所需如下镜像版本 tag [docker/desktop-kubernetes](https://hub.docker.com/r/docker/desktop-kubernetes/tags), [docker/desktop-vpnkit-controller](https://hub.docker.com/r/docker/desktop-vpnkit-controller/tags), [docker/desktop-storage-provisioner](https://hub.docker.com/r/docker/desktop-storage-provisioner/tags) 。\n* 欢迎体验阿里云容器服务 阿里云容器计算服务 ACS （Alibaba Cloud Container Compute Service，ACS）, 开启云上Kubernetes实践之旅。https://www.aliyun.com/product/acs\n\n\n### 开启 Kubernetes\n\n为 Kubernetes 配置 CPU 和 内存资源，建议分配 4GB 或更多内存。 \n\n![resource](images/resource.png)\n\n从阿里云镜像服务下载 Kubernetes 所需要的镜像\n\n在 Mac 上执行如下脚本\n\n```bash\n./load_images.sh\n```\n\n在Windows上，使用 PowerShell\n\n```powershell\n .\\load_images.ps1\n```\n\n说明: \n* 如果因为安全策略无法执行 PowerShell 脚本，请在 “以管理员身份运行” 的 PowerShell 中执行 ```Set-ExecutionPolicy RemoteSigned``` 命令。 \n* 如果需要，可以通过修改 ```images.properties``` 文件自行加载你自己需要的镜像\n\n\n开启 Kubernetes，并等待 Kubernetes 开始运行\n![k8s](images/k8s.png)\n\n**TIPS**：\n\n在Mac上:\n\n如果在Kubernetes部署的过程中出现问题，可以通过docker desktop应用日志获得实时日志信息：\n\n```bash\npred='process matches \".*(ocker|vpnkit).*\"\n  || (process in {\"taskgated-helper\", \"launchservicesd\", \"kernel\"} \u0026\u0026 eventMessage contains[c] \"docker\")'\n/usr/bin/log stream --style syslog --level=debug --color=always --predicate \"$pred\"\n```\n\n在Windows上:\n\n如果在Kubernetes部署的过程中出现问题，可以在 C:\\ProgramData\\DockerDesktop下的service.txt 查看Docker日志, 在 C:\\Users\\yourUserName\\AppData\\Local\\Docker下的log.txt 查看Kubernetes日志 \n\n\n**问题诊断**：\n\n如果看到 Kubernetes一直在启动状态，请参考 \n\n* [Issue 3769(comment)](https://github.com/docker/for-win/issues/3769#issuecomment-486046718) 或 [Issue 3649(comment)](https://github.com/docker/for-mac/issues/3649#issuecomment-497441158)\n  * 在macOS上面，执行 ```rm -fr '~/Library/Group\\ Containers/group.com.docker/pki'```\n  * 在Windows上面删除 'C:\\ProgramData\\DockerDesktop\\pki' 目录 和 'C:\\Users\\yourUserName\\AppData\\Local\\Docker\\pki' 目录\n* [Issue 1962(comment)](https://github.com/docker/for-win/issues/1962#issuecomment-431091114)\n\n\n\n**K8S进入容器方法**\n\nK8s如何进入一个pod里有多个容器的方法\n\n```\nkubectl --namespace=kube-system exec -it kube-dns-1336009800-15b1h --container nginx -- sh\n```\n\n或\n\n```\nkubectl --namespace=kube-system exec -it kube-dns-1336009800-15b1h  -c  nginx -- sh\n```\n\n注释：--namespace 为命名空间kube-dns为pod的名字，-c或-container为Pod里其中的一个容器名字\n\n\n### 配置 Kubernetes\n\n\n可选操作: 切换Kubernetes运行上下文至 docker-desktop (之前版本的 context 为 docker-for-desktop)\n\n\n```shell\nkubectl config use-context docker-desktop\n```\n\n验证 Kubernetes 集群状态\n\n```shell\nkubectl cluster-info\nkubectl get nodes\n```\n\n### 配置 Kubernetes 控制台\n\n#### 部署 Kubernetes dashboard\n\n```shell\nkubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.5.1/aio/deploy/recommended.yaml\n```\n\n或\n\n```shell\nkubectl apply -f kubernetes-dashboard.yaml\n```\n\n检查 kubernetes-dashboard 应用状态\n\n```shell\nkubectl get pod -n kubernetes-dashboard\n```\n\n开启 API Server 访问代理\n\n```shell\nkubectl proxy\n```\n\n通过如下 URL 访问 Kubernetes dashboard\n\nhttp://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/\n\n#### 配置控制台访问令牌\n\n授权`kube-system`默认服务账号\n\n```shell\nkubectl apply -f kube-system-default.yaml\n```\n\n对于Mac环境\n\n```shell\nTOKEN=$(kubectl -n kube-system describe secret default| awk '$1==\"token:\"{print $2}')\nkubectl config set-credentials docker-desktop --token=\"${TOKEN}\"\necho $TOKEN\n```\n\n对于Windows环境\n\n```shell\n$TOKEN=((kubectl -n kube-system describe secret default | Select-String \"token:\") -split \" +\")[1]\nkubectl config set-credentials docker-desktop --token=\"${TOKEN}\"\necho $TOKEN\n```\n\n#### 登录dashboard的时候\n\n![resource](images/k8s_credentials.png)\n\n选择 **令牌** \n\n输入上文控制台输出的内容\n\n或者选择 **Kubeconfig** 文件,路径如下：\n\n```\nMac: $HOME/.kube/config\nWin: %UserProfile%\\.kube\\config\n```\n\n点击登陆，进入Kubernetes Dashboard\n\n### 配置 Ingress\n\n说明：如果测试 Istio，不需要安装 Ingress\n\n#### 安装 Ingress\n\n[源地址安装说明](https://github.com/kubernetes/ingress-nginx/blob/master/docs/deploy/index.md)\n\n验证\n\n```shell\nkubectl get pods --all-namespaces -l app.kubernetes.io/name=ingress-nginx\n```\n\n#### 测试示例应用\n\n\n部署测试应用，详情参见[社区文章](https://matthewpalmer.net/kubernetes-app-developer/articles/kubernetes-ingress-guide-nginx-example.html)\n\n\n```shell\nkubectl create -f sample/apple.yaml\nkubectl create -f sample/banana.yaml\nkubectl create -f sample/ingress.yaml\n```\n\n测试示例应用\n\n```bash\n$ curl -kL http://localhost/apple\napple\n$ curl -kL http://localhost/banana\nbanana\n```\n\n删除示例应用\n\n```shell\nkubectl delete -f sample/apple.yaml\nkubectl delete -f sample/banana.yaml\nkubectl delete -f sample/ingress.yaml\n```\n\n#### 删除 Ingress\n\n```shell\nkubectl delete -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.2.0/deploy/static/provider/cloud/deploy.yaml\n```\n\n或\n\n```shell\nkubectl delete -f ingress-nginx-controller.yaml\n```\n\n### 安装 Helm\n\n可以根据文档安装 helm v3 https://helm.sh/docs/intro/install/\n在国内由于helm的cdn节点使用的是谷歌云所以可能访问不到，可以参考已存在的官方issue： https://github.com/helm/helm/issues/7028\n\n#### 在 Mac OS 上安装\n\n##### 通过 brew 安装\n\n```shell\n# Use homebrew on Mac\nbrew install helm\n\n# Add helm repo\nhelm repo add stable http://mirror.azure.cn/kubernetes/charts/\n\n# Update charts repo\nhelm repo update\n```\n\n#### 在Windows上安装\n\n如果在后续使用 helm 安装组件的过程中出现版本兼容问题，可以参考 `通过二进制包安装` 思路安装匹配的版本\n\n```shell\n# Use Chocolatey on Windows\n# 注：安装的时候需要保证网络能够访问googleapis这个域名\nchoco install kubernetes-helm\n\n# Change helm repo\nhelm repo add stable http://mirror.azure.cn/kubernetes/charts/\n\n# Update charts repo\nhelm repo update\n```\n\n#### 测试 Helm (可选)\n\n安装 Wordpress\n\n```shell\nhelm install wordpress stable/wordpress\n```\n\n查看 wordpress 发布状态\n\n```shell\nhelm status wordpress\n```\n\n卸载 wordpress 发布\n\n```shell\nhelm uninstall wordpress\n```\n\n### 配置 Istio\n\n说明：Istio Ingress Gateway和Ingress缺省的端口冲突，请移除Ingress并进行下面测试\n\n可以根据文档安装 Istio https://istio.io/docs/setup/getting-started/\n\n#### 下载 Istio\n\n例如下载Istio版本1.22.1（其他更新版本可以自行替换）, 执行如下命令：\n\n```bash\ncurl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.22.1 sh -\ncd istio-1.22.1\nexport PATH=$PWD/bin:$PATH\n```\n\n注意： Windows环境未经严格测试。\n\n在Windows上，您可以手工下载Istio安装包，或者把```getLatestIstio.ps1```拷贝到你希望下载 Istio 的目录，并执行 - 说明：根据社区提供的[安装脚本](https://gist.github.com/kameshsampath/796060a806da15b39aa9569c8f8e6bcf)修改而来\n\n```powershell\n.\\getLatestIstio.ps1\n```\n\n#### 安装 Istio\n\n```shell\nistioctl install --set profile=demo -y\n```\n\n#### 检查 Istio 状态\n\n```shell\nkubectl get pods -n istio-system\n```\n\n#### 为 ```default``` 名空间开启自动 sidecar 注入\n\n```shell\nkubectl label namespace default istio-injection=enabled\nkubectl get namespace -L istio-injection\n```\n\n#### 安装 Book Info 示例\n\n请参考 https://istio.io/docs/examples/bookinfo/\n\n```shell\nkubectl apply -f samples/bookinfo/platform/kube/bookinfo.yaml\n```\n\n查看示例应用资源\n\n```shell\nkubectl get svc,pod\n```\n\n确认示例应用在运行中\n\n```shell\nkubectl exec -it $(kubectl get pod -l app=ratings -o jsonpath='{.items[0].metadata.name}') -c ratings -- curl productpage:9080/productpage | grep -o \"\u003ctitle\u003e.*\u003c/title\u003e\"\n```\n\n创建 Ingress Gateway\n\n```shell\nkubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yaml\n```\n\n查看 Gateway 配置\n\n```shell\nkubectl get gateway\n```\n\n确认示例应用可以访问\n\n```shell\nexport GATEWAY_URL=localhost:80\ncurl -s http://${GATEWAY_URL}/productpage | grep -o \"\u003ctitle\u003e.*\u003c/title\u003e\"\n```\n\n可以通过浏览器访问\n\nhttp://localhost/productpage\n\n#### 删除实例应用\n\n```shell\nsamples/bookinfo/platform/kube/cleanup.sh\n```\n\n### 卸载 Istio\n\n```shell\nistioctl manifest generate --set profile=demo | kubectl delete -f -\n```\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdenverdino%2Fk8s-for-docker-desktop","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdenverdino%2Fk8s-for-docker-desktop","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdenverdino%2Fk8s-for-docker-desktop/lists"}