Merge pull request #40903 from windsonsea/addonsy
[zh] sync /cluster-administration/addons.mdpull/40919/head
Kubernetes Prow Robot
GitHub
commit
12921ccb01
|
|
@ -1,8 +1,13 @@
|
|||
---
|
||||
title: 安装扩展（Addons）
|
||||
title: 安装扩展（Addon）
|
||||
content_type: concept
|
||||
weight: 120
|
||||
---
|
||||
<!--
|
||||
title: Installing Addons
|
||||
content_type: concept
|
||||
weight: 120
|
||||
-->
|
||||
|
||||
<!-- overview -->
|
||||
|
||||
|
|
@ -11,24 +16,41 @@ weight: 120
|
|||
<!--
|
||||
Add-ons extend the functionality of Kubernetes.
|
||||
|
||||
This page lists some of the available add-ons and links to their respective installation instructions. The list does not try to be exhaustive.
|
||||
This page lists some of the available add-ons and links to their respective
|
||||
installation instructions. The list does not try to be exhaustive.
|
||||
-->
|
||||
Add-ons 扩展了 Kubernetes 的功能。
|
||||
Add-on 扩展了 Kubernetes 的功能。
|
||||
|
||||
本文列举了一些可用的 add-ons 以及到它们各自安装说明的链接。该列表并不试图详尽无遗。
|
||||
本文列举了一些可用的 add-on 以及到它们各自安装说明的链接。该列表并不试图详尽无遗。
|
||||
|
||||
<!-- body -->
|
||||
|
||||
<!--
|
||||
## Networking and Network Policy
|
||||
|
||||
* [ACI](https://www.github.com/noironetworks/aci-containers) provides integrated container networking and network security with Cisco ACI.
|
||||
* [Antrea](https://antrea.io/) operates at Layer 3/4 to provide networking and security services for Kubernetes, leveraging Open vSwitch as the networking data plane. Antrea is a [CNCF project at the Sandbox level](https://www.cncf.io/projects/antrea/).
|
||||
* [Calico](https://www.tigera.io/project-calico/) is a networking and network policy provider. Calico supports a flexible set of networking options so you can choose the most efficient option for your situation, including non-overlay and overlay networks, with or without BGP. Calico uses the same engine to enforce network policy for hosts, pods, and (if using Istio & Envoy) applications at the service mesh layer.
|
||||
* [Canal](https://projectcalico.docs.tigera.io/getting-started/kubernetes/flannel/flannel) unites Flannel and Calico, providing networking and network policy.
|
||||
* [Cilium](https://github.com/cilium/cilium) is a networking, observability, and security solution with an eBPF-based data plane. Cilium provides a simple flat Layer 3 network with the ability to span multiple clusters in either a native routing or overlay/encapsulation mode, and can enforce network policies on L3-L7 using an identity-based security model that is decoupled from network addressing. Cilium can act as a replacement for kube-proxy; it also offers additional, opt-in observability and security features. Cilium is a [CNCF project at the Incubation level](https://www.cncf.io/projects/cilium/).
|
||||
* [ACI](https://www.github.com/noironetworks/aci-containers) provides integrated
|
||||
container networking and network security with Cisco ACI.
|
||||
* [Antrea](https://antrea.io/) operates at Layer 3/4 to provide networking and
|
||||
security services for Kubernetes, leveraging Open vSwitch as the networking
|
||||
data plane. Antrea is a [CNCF project at the Sandbox level](https://www.cncf.io/projects/antrea/).
|
||||
* [Calico](https://www.tigera.io/project-calico/) is a networking and network
|
||||
policy provider. Calico supports a flexible set of networking options so you
|
||||
can choose the most efficient option for your situation, including non-overlay
|
||||
and overlay networks, with or without BGP. Calico uses the same engine to
|
||||
enforce network policy for hosts, pods, and (if using Istio & Envoy)
|
||||
applications at the service mesh layer.
|
||||
* [Canal](https://projectcalico.docs.tigera.io/getting-started/kubernetes/flannel/flannel)
|
||||
unites Flannel and Calico, providing networking and network policy.
|
||||
* [Cilium](https://github.com/cilium/cilium) is a networking, observability,
|
||||
and security solution with an eBPF-based data plane. Cilium provides a
|
||||
simple flat Layer 3 network with the ability to span multiple clusters
|
||||
in either a native routing or overlay/encapsulation mode, and can enforce
|
||||
network policies on L3-L7 using an identity-based security model that is
|
||||
decoupled from network addressing. Cilium can act as a replacement for
|
||||
kube-proxy; it also offers additional, opt-in observability and security features.
|
||||
Cilium is a [CNCF project at the Incubation level](https://www.cncf.io/projects/cilium/).
|
||||
-->
|
||||
## 联网和网络策略
|
||||
## 联网和网络策略 {#networking-and-network-policy}
|
||||
|
||||
* [ACI](https://www.github.com/noironetworks/aci-containers) 通过 Cisco ACI 提供集成的容器网络和安全网络。
|
||||
* [Antrea](https://antrea.io/) 在第 3/4 层执行操作，为 Kubernetes
|
||||
|
|
@ -37,7 +59,8 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
* [Calico](https://www.tigera.io/project-calico/) 是一个联网和网络策略供应商。
|
||||
Calico 支持一套灵活的网络选项，因此你可以根据自己的情况选择最有效的选项，包括非覆盖和覆盖网络，带或不带 BGP。
|
||||
Calico 使用相同的引擎为主机、Pod 和（如果使用 Istio 和 Envoy）应用程序在服务网格层执行网络策略。
|
||||
* [Canal](https://projectcalico.docs.tigera.io/getting-started/kubernetes/flannel/flannel) 结合 Flannel 和 Calico，提供联网和网络策略。
|
||||
* [Canal](https://projectcalico.docs.tigera.io/getting-started/kubernetes/flannel/flannel)
|
||||
结合 Flannel 和 Calico，提供联网和网络策略。
|
||||
* [Cilium](https://github.com/cilium/cilium) 是一种网络、可观察性和安全解决方案，具有基于 eBPF 的数据平面。
|
||||
Cilium 提供了简单的 3 层扁平网络，
|
||||
能够以原生路由（routing）和覆盖/封装（overlay/encapsulation）模式跨越多个集群，
|
||||
|
|
@ -45,9 +68,20 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
Cilium 可以作为 kube-proxy 的替代品；它还提供额外的、可选的可观察性和安全功能。
|
||||
Cilium 是一个[孵化级别的 CNCF 项目](https://www.cncf.io/projects/cilium/)。
|
||||
<!--
|
||||
* [CNI-Genie](https://github.com/cni-genie/CNI-Genie) enables Kubernetes to seamlessly connect to a choice of CNI plugins, such as Calico, Canal, Flannel, or Weave. CNI-Genie is a [CNCF project at the Sandbox level](https://www.cncf.io/projects/cni-genie/).
|
||||
* [Contiv](https://contivpp.io/) provides configurable networking (native L3 using BGP, overlay using vxlan, classic L2, and Cisco-SDN/ACI) for various use cases and a rich policy framework. Contiv project is fully [open sourced](https://github.com/contiv). The [installer](https://github.com/contiv/install) provides both kubeadm and non-kubeadm based installation options.
|
||||
* [Contrail](https://www.juniper.net/us/en/products-services/sdn/contrail/contrail-networking/), based on [Tungsten Fabric](https://tungsten.io), is an open source, multi-cloud network virtualization and policy management platform. Contrail and Tungsten Fabric are integrated with orchestration systems such as Kubernetes, OpenShift, OpenStack and Mesos, and provide isolation modes for virtual machines, containers/pods and bare metal workloads.
|
||||
* [CNI-Genie](https://github.com/cni-genie/CNI-Genie) enables Kubernetes to seamlessly
|
||||
connect to a choice of CNI plugins, such as Calico, Canal, Flannel, or Weave.
|
||||
CNI-Genie is a [CNCF project at the Sandbox level](https://www.cncf.io/projects/cni-genie/).
|
||||
* [Contiv](https://contivpp.io/) provides configurable networking (native L3 using BGP,
|
||||
overlay using vxlan, classic L2, and Cisco-SDN/ACI) for various use cases and a rich
|
||||
policy framework. Contiv project is fully [open sourced](https://github.com/contiv).
|
||||
The [installer](https://github.com/contiv/install) provides both kubeadm and
|
||||
non-kubeadm based installation options.
|
||||
* [Contrail](https://www.juniper.net/us/en/products-services/sdn/contrail/contrail-networking/),
|
||||
based on [Tungsten Fabric](https://tungsten.io), is an open source, multi-cloud
|
||||
network virtualization and policy management platform. Contrail and Tungsten
|
||||
Fabric are integrated with orchestration systems such as Kubernetes, OpenShift,
|
||||
OpenStack and Mesos, and provide isolation modes for virtual machines, containers/pods
|
||||
and bare metal workloads.
|
||||
-->
|
||||
* [CNI-Genie](https://github.com/cni-genie/CNI-Genie) 使 Kubernetes 无缝连接到
|
||||
Calico、Canal、Flannel 或 Weave 等其中一种 CNI 插件。
|
||||
|
|
@ -61,9 +95,14 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
Contrail 和 Tungsten Fabric 与业务流程系统（例如 Kubernetes、OpenShift、OpenStack 和 Mesos）集成在一起，
|
||||
为虚拟机、容器或 Pod 以及裸机工作负载提供了隔离模式。
|
||||
<!--
|
||||
* [Flannel](https://github.com/flannel-io/flannel#deploying-flannel-manually) is an overlay network provider that can be used with Kubernetes.
|
||||
* [Knitter](https://github.com/ZTE/Knitter/) is a plugin to support multiple network interfaces in a Kubernetes pod.
|
||||
* [Multus](https://github.com/k8snetworkplumbingwg/multus-cni) is a Multi plugin for multiple network support in Kubernetes to support all CNI plugins (e.g. Calico, Cilium, Contiv, Flannel), in addition to SRIOV, DPDK, OVS-DPDK and VPP based workloads in Kubernetes.
|
||||
* [Flannel](https://github.com/flannel-io/flannel#deploying-flannel-manually) is
|
||||
an overlay network provider that can be used with Kubernetes.
|
||||
* [Knitter](https://github.com/ZTE/Knitter/) is a plugin to support multiple network
|
||||
interfaces in a Kubernetes pod.
|
||||
* [Multus](https://github.com/k8snetworkplumbingwg/multus-cni) is a Multi plugin for
|
||||
multiple network support in Kubernetes to support all CNI plugins
|
||||
(e.g. Calico, Cilium, Contiv, Flannel), in addition to SRIOV, DPDK, OVS-DPDK and
|
||||
VPP based workloads in Kubernetes.
|
||||
-->
|
||||
* [Flannel](https://github.com/flannel-io/flannel#deploying-flannel-manually)
|
||||
是一个可以用于 Kubernetes 的 overlay 网络提供者。
|
||||
|
|
@ -72,8 +111,13 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
可在 Kubernetes 中提供多种网络支持，以支持所有 CNI 插件（例如 Calico、Cilium、Contiv、Flannel），
|
||||
而且包含了在 Kubernetes 中基于 SRIOV、DPDK、OVS-DPDK 和 VPP 的工作负载。
|
||||
<!--
|
||||
* [OVN-Kubernetes](https://github.com/ovn-org/ovn-kubernetes/) is a networking provider for Kubernetes based on [OVN (Open Virtual Network)](https://github.com/ovn-org/ovn/), a virtual networking implementation that came out of the Open vSwitch (OVS) project. OVN-Kubernetes provides an overlay based networking implementation for Kubernetes, including an OVS based implementation of load balancing and network policy.
|
||||
* [Nodus](https://github.com/akraino-edge-stack/icn-nodus) is an OVN based CNI controller plugin to provide cloud native based Service function chaining(SFC).
|
||||
* [OVN-Kubernetes](https://github.com/ovn-org/ovn-kubernetes/) is a networking
|
||||
provider for Kubernetes based on [OVN (Open Virtual Network)](https://github.com/ovn-org/ovn/),
|
||||
a virtual networking implementation that came out of the Open vSwitch (OVS) project.
|
||||
OVN-Kubernetes provides an overlay based networking implementation for Kubernetes,
|
||||
including an OVS based implementation of load balancing and network policy.
|
||||
* [Nodus](https://github.com/akraino-edge-stack/icn-nodus) is an OVN based CNI
|
||||
controller plugin to provide cloud native based Service function chaining(SFC).
|
||||
-->
|
||||
* [OVN-Kubernetes](https://github.com/ovn-org/ovn-kubernetes/) 是一个 Kubernetes 网络驱动，
|
||||
基于 [OVN（Open Virtual Network）](https://github.com/ovn-org/ovn/)实现，是从 Open vSwitch (OVS)
|
||||
|
|
@ -82,10 +126,18 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
* [Nodus](https://github.com/akraino-edge-stack/icn-nodus) 是一个基于 OVN 的 CNI 控制器插件，
|
||||
提供基于云原生的服务功能链 (SFC)。
|
||||
<!--
|
||||
* [NSX-T](https://docs.vmware.com/en/VMware-NSX-T-Data-Center/index.html) Container Plug-in (NCP) provides integration between VMware NSX-T and container orchestrators such as Kubernetes, as well as integration between NSX-T and container-based CaaS/PaaS platforms such as Pivotal Container Service (PKS) and OpenShift.
|
||||
* [Nuage](https://github.com/nuagenetworks/nuage-kubernetes/blob/v5.1.1-1/docs/kubernetes-1-installation.rst) is an SDN platform that provides policy-based networking between Kubernetes Pods and non-Kubernetes environments with visibility and security monitoring.
|
||||
* [Romana](https://github.com/romana) is a Layer 3 networking solution for pod networks that also supports the [NetworkPolicy](/docs/concepts/services-networking/network-policies/) API.
|
||||
* [Weave Net](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/) provides networking and network policy, will carry on working on both sides of a network partition, and does not require an external database.
|
||||
* [NSX-T](https://docs.vmware.com/en/VMware-NSX-T-Data-Center/index.html) Container Plug-in (NCP)
|
||||
provides integration between VMware NSX-T and container orchestrators such as
|
||||
Kubernetes, as well as integration between NSX-T and container-based CaaS/PaaS
|
||||
platforms such as Pivotal Container Service (PKS) and OpenShift.
|
||||
* [Nuage](https://github.com/nuagenetworks/nuage-kubernetes/blob/v5.1.1-1/docs/kubernetes-1-installation.rst)
|
||||
is an SDN platform that provides policy-based networking between Kubernetes
|
||||
Pods and non-Kubernetes environments with visibility and security monitoring.
|
||||
* [Romana](https://github.com/romana) is a Layer 3 networking solution for pod
|
||||
networks that also supports the [NetworkPolicy](/docs/concepts/services-networking/network-policies/) API.
|
||||
* [Weave Net](https://www.weave.works/docs/net/latest/kubernetes/kube-addon/)
|
||||
provides networking and network policy, will carry on working on both sides
|
||||
of a network partition, and does not require an external database.
|
||||
-->
|
||||
* [NSX-T](https://docs.vmware.com/en/VMware-NSX-T-Data-Center/index.html) 容器插件（NCP）
|
||||
提供了 VMware NSX-T 与容器协调器（例如 Kubernetes）之间的集成，以及 NSX-T 与基于容器的
|
||||
|
|
@ -100,9 +152,11 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
<!--
|
||||
## Service Discovery
|
||||
|
||||
* [CoreDNS](https://coredns.io) is a flexible, extensible DNS server which can be [installed](https://github.com/coredns/deployment/tree/master/kubernetes) as the in-cluster DNS for pods.
|
||||
* [CoreDNS](https://coredns.io) is a flexible, extensible DNS server which can
|
||||
be [installed](https://github.com/coredns/deployment/tree/master/kubernetes)
|
||||
as the in-cluster DNS for pods.
|
||||
-->
|
||||
## 服务发现
|
||||
## 服务发现 {#service-discovery}
|
||||
|
||||
* [CoreDNS](https://coredns.io) 是一种灵活的，可扩展的 DNS 服务器，可以
|
||||
[安装](https://github.com/coredns/deployment/tree/master/kubernetes)为集群内的 Pod 提供 DNS 服务。
|
||||
|
|
@ -110,10 +164,14 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
<!--
|
||||
## Visualization & Control
|
||||
|
||||
* [Dashboard](https://github.com/kubernetes/dashboard#kubernetes-dashboard) is a dashboard web interface for Kubernetes.
|
||||
* [Weave Scope](https://www.weave.works/documentation/scope-latest-installing/#k8s) is a tool for graphically visualizing your containers, pods, services etc. Use it in conjunction with a [Weave Cloud account](https://cloud.weave.works/) or host the UI yourself.
|
||||
* [Dashboard](https://github.com/kubernetes/dashboard#kubernetes-dashboard)
|
||||
is a dashboard web interface for Kubernetes.
|
||||
* [Weave Scope](https://www.weave.works/documentation/scope-latest-installing/#k8s)
|
||||
is a tool for graphically visualizing your containers, pods, services etc.
|
||||
Use it in conjunction with a [Weave Cloud account](https://cloud.weave.works/)
|
||||
or host the UI yourself.
|
||||
-->
|
||||
## 可视化管理
|
||||
## 可视化管理 {#visualization-and-control}
|
||||
|
||||
* [Dashboard](https://github.com/kubernetes/dashboard#kubernetes-dashboard) 是一个 Kubernetes 的 Web 控制台界面。
|
||||
* [Weave Scope](https://www.weave.works/documentation/scope-latest-installing/#k8s) 是一个图形化工具，
|
||||
|
|
@ -123,17 +181,18 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
<!--
|
||||
## Infrastructure
|
||||
|
||||
* [KubeVirt](https://kubevirt.io/user-guide/#/installation/installation) is an add-on to run virtual machines on Kubernetes. Usually run on bare-metal clusters.
|
||||
* [KubeVirt](https://kubevirt.io/user-guide/#/installation/installation) is an add-on
|
||||
to run virtual machines on Kubernetes. Usually run on bare-metal clusters.
|
||||
* The
|
||||
[node problem detector](https://github.com/kubernetes/node-problem-detector)
|
||||
runs on Linux nodes and reports system issues as either
|
||||
[Events](/docs/reference/kubernetes-api/cluster-resources/event-v1/) or
|
||||
[Node conditions](/docs/concepts/architecture/nodes/#condition).
|
||||
-->
|
||||
## 基础设施
|
||||
## 基础设施 {#infrastructure}
|
||||
|
||||
* [KubeVirt](https://kubevirt.io/user-guide/#/installation/installation) 是可以让 Kubernetes
|
||||
运行虚拟机的 add-ons。通常运行在裸机集群上。
|
||||
运行虚拟机的 add-on。通常运行在裸机集群上。
|
||||
* [节点问题检测器](https://github.com/kubernetes/node-problem-detector) 在 Linux 节点上运行，
|
||||
并将系统问题报告为[事件](/zh-cn/docs/reference/kubernetes-api/cluster-resources/event-v1/)
|
||||
或[节点状况](/zh-cn/docs/concepts/architecture/nodes/#condition)。
|
||||
|
|
@ -141,12 +200,13 @@ Add-ons 扩展了 Kubernetes 的功能。
|
|||
<!--
|
||||
## Legacy Add-ons
|
||||
|
||||
There are several other add-ons documented in the deprecated [cluster/addons](https://git.k8s.io/kubernetes/cluster/addons) directory.
|
||||
There are several other add-ons documented in the deprecated
|
||||
[cluster/addons](https://git.k8s.io/kubernetes/cluster/addons) directory.
|
||||
|
||||
Well-maintained ones should be linked to here. PRs welcome!
|
||||
-->
|
||||
## 遗留 Add-ons
|
||||
## 遗留 Add-on {#legacy-addons}
|
||||
|
||||
还有一些其它 add-ons 归档在已废弃的 [cluster/addons](https://git.k8s.io/kubernetes/cluster/addons) 路径中。
|
||||
还有一些其它 add-on 归档在已废弃的 [cluster/addons](https://git.k8s.io/kubernetes/cluster/addons) 路径中。
|
||||
|
||||
维护完善的 add-ons 应该被链接到这里。欢迎提出 PRs！
|
||||
维护完善的 add-on 应该被链接到这里。欢迎提出 PR！
|
||||
|
|
|
|||
Loading…
Reference in New Issue