更改pod内容器名

k8s_yaml/config/apex-user/apex-user-kubeconfig.yaml

@@ -4,15 +4,16 @@ clusters:
 - cluster:  # kubectl config view --raw -o jsonpath='{.clusters[0].cluster.server}' 获取集群ca
     certificate-authority-data: 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
     server: https://10.0.10.125
-  name: cls-pl1yhr34
+  name: cls-pl1yhr34       # 给集群起的名字
 contexts:
 - context:
     cluster: cls-pl1yhr34
     namespace: apex-evaluation
     user: apex-user
-  name: cls-pl1yhr34-100038894437-context-default
-current-context: cls-pl1yhr34-100038894437-context-default
+  name: apex-user-apex-evaluation   # 给上下文起的名字
+current-context: apex-user-apex-evaluation  # 当前使用的上下文
 users:
-- name: apex-user
-  user: # kubectl create token apex-user -n apex-evaluation 创建token
-    token: eyJhbGciOiJSUzI1NiIsImtpZCI6IjF5MjNtcUNOVzhsZTlFRUNfQ2NDQ3hjbi1TRV9wS09LYTBzUTA4UU1Yc00ifQ.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.fmfLIliz_bNlX6TbRh-ylBfWnIKJJ1eJPB7WjbveOPZVUZToUp14GIaUZd5bA_dncclcfI2UQH0rAFt7xKEvgXioyYDmK5ODkryCTeNV-3mHQsvisN_TUzV3JkDjtuyrA3DKoQ_31N6qp-69vgBvpXiLk_VU9j0Wr--n3EqAv-sFU8wptuGB_8tJiDzpHGhQhNyltNUY8hYY7OsiH8AIPEMxTjbwrJg8eeULBxXOz521u6jO5mpWCDvNsOoQp6luLBtxFWZjoNRH_xhRgfL2tzrwC8RTkiaEXeI_zKNrbC6MactOhfblXjAf44HSEAOO7F_oPBR8ZCJnQnGJ3U3cBQ
+- name: apex-user  # 给用户起的名字
+  user: #  kubectl get secret apex-user-longtoken -n apex-evaluation -o jsonpath='{.data.token}' | base64 --decode             查看创建的长token
+    token: eyJhbGciOiJSUzI1NiIsImtpZCI6IjF5MjNtcUNOVzhsZTlFRUNfQ2NDQ3hjbi1TRV9wS09LYTBzUTA4UU1Yc00ifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJhcGV4LWV2YWx1YXRpb24iLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlY3JldC5uYW1lIjoiYXBleC11c2VyLWxvbmd0b2tlbiIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50Lm5hbWUiOiJhcGV4LXVzZXIiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC51aWQiOiI1MDg3ODlhMi1kMGY4LTQ2ODUtOTFkYy0yM2FiMjg1YWY4NDciLCJzdWIiOiJzeXN0ZW06c2VydmljZWFjY291bnQ6YXBleC1ldmFsdWF0aW9uOmFwZXgtdXNlciJ9.qALi7OsG_MP_fUhgDYYYXQaRNqwoOnzB-UrUURO-x4PCUKcBzavSajBmPXa_XJj9fohF3Y29-hAQwowJzFjv-bWwqBe_1LGhUsyVXWWAZViq3cJywfDfOcluFbHgxMLGUMYWWbgrezuEiHnQXnrHJTZ8MFISTfH6sQnATioOY9sP87nuZYWpsWFoG4X3Hc8d0EkYYVulEFPIKrbFffy5-I0iYPP8EaGF17VjYZCF0g-25VrN6mDgqi3PYiudSQj-KCCs-23CJu3KoMzw2owObaMFqUSEC27Q6F4qMTyK9S7bMttErYkTPjPUtCYSZPGlktErCxEv0sx12XmpPiGCFg
+

k8s_yaml/config/apex-user/apex-user-longtoken.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apex-user-longtoken
+  namespace: apex-evaluation
+  annotations:
+    kubernetes.io/service-account.name: apex-user
+type: kubernetes.io/service-account-token
+
+
+# 创建完成后：
+# kubectl get secret apex-user-longtoken -n apex-evaluation -o yaml

k8s_yaml/config/apex-user/apex-user-rbac.yaml

@@ -14,8 +14,11 @@ metadata:
   namespace: apex-evaluation   # 绑定到 apex-evaluation 命名空间
 rules:
 - apiGroups: ["", "apps", "extensions", "batch", "networking.k8s.io"]
-  resources: ["pods", "pods/log", "statefulsets", "deployments", daemonsets, "services", "configmaps", "secrets"]
+  resources: ["pods", "pods/log", "statefulsets", "deployments", daemonsets, "services", "configmaps", "secrets", "events", "replicasets"]
   verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: ["metrics.k8s.io"]
+  resources: ["pods","nodes"]
+  verbs: ["get","list","watch"]
 ---
 
 # 将 apex-evaluation 命名空间的 Role 绑定到 ServiceAccount

k8s_yaml/config/apex-user/network-test-pod.yaml

@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: network-test-pod
+  namespace: apex-evaluation
+  labels:
+    app: network-test
+spec:
+  containers:
+  - name: network-tools
+    image: nicolaka/netshoot:latest
+    command: ["/bin/sh"]
+    args: ["-c", "sleep 3600"]  # 保持运行1小时
+    resources:
+      requests:
+        memory: "64Mi"
+        cpu: "50m"
+      limits:
+        memory: "128Mi"
+        cpu: "100m"