上一篇文章是静态创建PV，这一篇介绍使用StorageClass动态创建PV

与上一篇文章相比，去掉了mysql-pv.yaml的配置文件，新增三个配置文件rbac.yaml class.yaml nfs-client-provisioner-deployment.yaml

从功能上讲，rbac用于绑定角色权限，class用于定义StorageClass名，nfs-client-provisioner-deployment用于指定nfs路径、rbac的sa名和StorageClass名。

与静态pv不同的是，在nfs生成路径时会创建形如default-mysql-pvc-pvc-0d446403-f342-4918-878d-b8e0f8c6a954的目录，数据会放到这个目录下。

部署参考脚本

1. https://github.com/kubernetes-retired/external-storage/tree/master/nfs-client/deploy

2. https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner/tree/master/deploy

这里仍然以部署mysql数据库为例，以下是完整配置

rabc.yaml

apiVersion: v1
kind: ServiceAccount
metadata:name: nfs-client-provisioner# replace with namespace where provisioner is deployednamespace: default
---
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:name: nfs-client-provisioner-runner
rules:- apiGroups: [""]resources: ["persistentvolumes"]verbs: ["get", "list", "watch", "create", "delete"]- apiGroups: [""]resources: ["persistentvolumeclaims"]verbs: ["get", "list", "watch", "update"]- apiGroups: ["storage.k8s.io"]resources: ["storageclasses"]verbs: ["get", "list", "watch"]- apiGroups: [""]resources: ["events"]verbs: ["create", "update", "patch"]
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:name: run-nfs-client-provisioner
subjects:- kind: ServiceAccountname: nfs-client-provisioner# replace with namespace where provisioner is deployednamespace: default
roleRef:kind: ClusterRolename: nfs-client-provisioner-runnerapiGroup: rbac.authorization.k8s.io
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:name: leader-locking-nfs-client-provisioner# replace with namespace where provisioner is deployednamespace: default
rules:- apiGroups: [""]resources: ["endpoints"]verbs: ["get", "list", "watch", "create", "update", "patch"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:name: leader-locking-nfs-client-provisioner# replace with namespace where provisioner is deployednamespace: default
subjects:- kind: ServiceAccountname: nfs-client-provisioner# replace with namespace where provisioner is deployednamespace: default
roleRef:kind: Rolename: leader-locking-nfs-client-provisionerapiGroup: rbac.authorization.k8s.io

class.yaml

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:name: managed-nfs-storage
provisioner: fuseim.pri/ifs # or choose another name, must match deployment's env PROVISIONER_NAME'
parameters:archiveOnDelete: "false"

nfs-client-provisioner-deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:name: nfs-client-provisionerlabels:app: nfs-client-provisioner# replace with namespace where provisioner is deployednamespace: default
spec:replicas: 1strategy:type: Recreateselector:matchLabels:app: nfs-client-provisionertemplate:metadata:labels:app: nfs-client-provisionerspec:serviceAccountName: nfs-client-provisionercontainers:- name: nfs-client-provisioner#image: quay.io/external_storage/nfs-client-provisioner:latest 不要用这个镜像，会出现pvc一直pending的问题#image: k8s.gcr.io/sig-storage/nfs-subdir-external-provisioner:v4.0.2image: uhub.service.ucloud.cn/iatc/nfs-subdir-external-provisioner:v4.0.2volumeMounts:- name: nfs-client-rootmountPath: /persistentvolumesenv:- name: PROVISIONER_NAMEvalue: fuseim.pri/ifs- name: NFS_SERVERvalue: 192.168.3.86- name: NFS_PATHvalue: /root/nfs_rootvolumes:- name: nfs-client-rootnfs:server: 192.168.3.86path: /root/nfs_root

mysql-pvc.yaml

apiVersion: v1
kind: PersistentVolumeClaim
metadata:name: mysql-pvcnamespace: default
spec:accessModes:- ReadWriteManystorageClassName: managed-nfs-storage   #此处为你命名的StorageClass nameresources:requests:storage: 4Gi

mysql-config.yaml

apiVersion: v1
kind: ConfigMap
metadata:name: mysql-confignamespace: default
data:my.cnf: |[client]default-character-set=utf8mb4[mysql]default-character-set=utf8mb4[mysqld] max_connections = 2000secure_file_priv=/var/lib/mysqlsql_mode=STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION

mysql-deploy.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:name: mysql-deploynamespace: default
spec:selector:matchLabels:app: mysql-deploytemplate:metadata:labels:app: mysql-deployspec:containers:- name: mysql-deployimage: mysql:8.0.28args:- --default_authentication_plugin=mysql_native_password- --character-set-server=utf8mb4- --collation-server=utf8mb4_unicode_cienv:                        - name: MYSQL_ROOT_PASSWORDvalue: "12345678"ports:- containerPort: 3306volumeMounts:- name: mysql-persistent-storagemountPath: /var/lib/mysql- name: mysql-configmountPath: /etc/mysql/conf.d/my.cnf         volumes:- name: mysql-persistent-storagepersistentVolumeClaim:claimName: mysql-pvc- name: mysql-configconfigMap:name: mysql-config      
---
apiVersion: v1
kind: Service
metadata:name: mysql-deploynamespace: default
spec:type: NodePortports:- port: 3306targetPort: 3306nodePort: 31111selector:app: mysql-deploy

执行以下命令部署

kubectl apply -f rbac.yaml
kubectl apply -f class.yaml
kubectl apply -f nfs-client-provisioner-deployment.yaml
kubectl apply -f mysql-pvc.yaml
kubectl apply -f mysql-config.yaml
kubectl apply -f mysql-deploy.yaml

执行以下命令卸载

kubectl delete -f mysql-deploy.yaml
kubectl delete -f mysql-config.yaml
kubectl delete -f mysql-pvc.yaml
kubectl delete -f nfs-client-provisioner-deployment.yaml
kubectl delete -f class.yaml
kubectl delete -f rbac.yaml

如果需要设置默认sc（StorageClass），执行如下命令

#managed-nfs-storage为sc名 可通过kubectl get sc命令查看所有sc
# kubectl patch sc managed-nfs-storage -p '{"metadata": {"annotations": {"storageclass.beta.kubernetes.io/is-default-class": "true"}}}'