基于kubernetes1.23.17容器化部署RuoYi全栈项目手册
一、环境准备
开源地址:
https://gitee.com/y_project/
## 环境说明
- Kubernetes集群：- Master节点：master231 (10.0.0.231)- Worker节点：worker232 (10.0.0.232)- Worker节点：worker233 (10.0.0.233)
- 集群版本：v1.23.17
- 存储类型：默认StorageClass
- 网络组件：Nginx Ingress Controller---一、集群初始化准备1.1 节点环境验证
[master231]$ kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP
master231 Ready master 15d v1.23.17 10.0.0.231
worker232 Ready <none> 15d v1.23.17 10.0.0.232
worker233 Ready <none> 15d v1.23.17 10.0.0.233# 所有节点下载必要的软件包apt-get update && sudo apt-get install -y git maven nodejs npm二、代码编译与镜像构建
1. 后端构建
git clone https://gitee.com/y_project/RuoYi.git
cd RuoYi
mvn clean package -Dmaven.test.skip=true# 创建Dockerfile（ruoyi-backend/Dockerfile）
cat > Dockerfile <<EOF
FROM openjdk:11-jdk
VOLUME /tmp
COPY target/ruoyi.jar app.jar
ENTRYPOINT ["java","-Djava.security.egd=file:/dev/./urandom","-jar","/app.jar"]
EOFdocker build -t ruoyi-backend:4.7.6 .2. 前端构建
git clone https://gitee.com/y_project/RuoYi-Vue.git
cd RuoYi-Vue/ruoyi-ui
npm install
npm run build:prod# 创建Dockerfile（ruoyi-frontend/Dockerfile）
cat > Dockerfile <<EOF
FROM nginx:1.21-alpine
COPY dist /usr/share/nginx/html
COPY nginx.conf /etc/nginx/conf.d/default.conf
EOF# 创建nginx配置（nginx.conf）
cat > nginx.conf <<EOF
server {listen 80;server_name localhost;location / {root /usr/share/nginx/html;index index.html index.htm;try_files \$uri \$uri/ /index.html;}location /prod-api/ {proxy_pass http://ruoyi-backend-service:8080/;}
}
EOFdocker build -t ruoyi-frontend:4.7.6 .三、Kubernetes资源配置文件
1. 命名空间（00-namespace.yaml）
apiVersion: v1
kind: Namespace
metadata:name: ruoyi-system2. MySQL部署（01-mysql.yaml）
apiVersion: v1
kind: Secret
metadata:name: mysql-secretnamespace: ruoyi-system
type: Opaque
data:root-password: Y2FvZmFjYW4K # echo -n "caofacan2005" | base64
---
apiVersion: apps/v1
kind: Deployment
metadata:name: mysqlnamespace: ruoyi-system
spec:selector:matchLabels:app: mysqltemplate:metadata:labels:app: mysqlspec:containers:- name: mysqlimage: mysql:5.7env:- name: MYSQL_ROOT_PASSWORDvalueFrom:secretKeyRef:name: mysql-secretkey: root-passwordports:- containerPort: 3306volumeMounts:- name: mysql-storagemountPath: /var/lib/mysqlvolumes:- name: mysql-storagepersistentVolumeClaim:claimName: mysql-pvc
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:name: mysql-pvcnamespace: ruoyi-system
spec:accessModes:- ReadWriteOnceresources:requests:storage: 5Gi
---
apiVersion: v1
kind: Service
metadata:name: mysql-servicenamespace: ruoyi-system
spec:selector:app: mysqlports:- protocol: TCPport: 3306targetPort: 33063. Redis部署（02-redis.yaml）
apiVersion: v1
kind: Secret
metadata:name: redis-secretnamespace: ruoyi-system
type: Opaque
data:password: Y2FvY2FjYW4yMDA1
---
apiVersion: apps/v1
kind: Deployment
metadata:name: redisnamespace: ruoyi-system
spec:selector:matchLabels:app: redistemplate:metadata:labels:app: redisspec:containers:- name: redisimage: redis:6.2-alpinecommand: ["redis-server", "--requirepass $(REDIS_PASSWORD)"]env:- name: REDIS_PASSWORDvalueFrom:secretKeyRef:name: redis-secretkey: passwordports:- containerPort: 6379
---
apiVersion: v1
kind: Service
metadata:name: redis-servicenamespace: ruoyi-system
spec:selector:app: redisports:- protocol: TCPport: 6379targetPort: 63794. 后端应用部署（03-backend.yaml）
apiVersion: apps/v1
kind: Deployment
metadata:name: ruoyi-backendnamespace: ruoyi-system
spec:replicas: 2selector:matchLabels:app: ruoyi-backendtemplate:metadata:labels:app: ruoyi-backendspec:containers:- name: backendimage: ruoyi-backend:4.7.6env:- name: SPRING_DATASOURCE_PASSWORDvalueFrom:secretKeyRef:name: mysql-secretkey: root-password- name: SPRING_REDIS_PASSWORDvalueFrom:secretKeyRef:name: redis-secretkey: passwordports:- containerPort: 8080
---
apiVersion: v1
kind: Service
metadata:name: ruoyi-backend-servicenamespace: ruoyi-system
spec:selector:app: ruoyi-backendports:- protocol: TCPport: 8080targetPort: 80805. 前端应用部署（04-frontend.yaml）
apiVersion: apps/v1
kind: Deployment
metadata:name: ruoyi-frontendnamespace: ruoyi-system
spec:replicas: 2selector:matchLabels:app: ruoyi-frontendtemplate:metadata:labels:app: ruoyi-frontendspec:containers:- name: frontendimage: ruoyi-frontend:4.7.6ports:- containerPort: 80
---
apiVersion: v1
kind: Service
metadata:name: ruoyi-frontend-servicenamespace: ruoyi-system
spec:selector:app: ruoyi-frontendports:- protocol: TCPport: 80targetPort: 80
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:name: ruoyi-ingressnamespace: ruoyi-system
spec:rules:- host: ruoyi.localhttp:paths:- path: /pathType: Prefixbackend:service:name: ruoyi-frontend-serviceport:number: 80- path: /prod-api/pathType: Prefixbackend:service:name: ruoyi-backend-serviceport:number: 8080四、部署流程
# 按顺序执行以下命令
kubectl apply -f 00-namespace.yaml
kubectl apply -f 01-mysql.yaml
kubectl apply -f 02-redis.yaml# 等待数据库就绪
kubectl -n ruoyi-system wait --for=condition=ready pod -l app=mysql --timeout=300s# 初始化数据库
kubectl -n ruoyi-system exec -it $(kubectl get pod -l app=mysql -n ruoyi-system -o jsonpath='{.items[0].metadata.name}') -- mysql -uroot -pcaofacan2005 -e "CREATE DATABASE IF NOT EXISTS ry;"
kubectl -n ruoyi-system exec -it $(kubectl get pod -l app=mysql -n ruoyi-system -o jsonpath='{.items[0].metadata.name}') -- mysql -uroot -pcaofacan2005 ry < RuoYi/sql/ry_20230710.sql# 部署应用
kubectl apply -f 03-backend.yaml
kubectl apply -f 04-frontend.yaml# 验证部署
kubectl -n ruoyi-system get all,ingress五、部署验证
1.状态检查
[master231]$ kubectl get pods -n ruoyi-system -o wide
NAME READY STATUS RESTARTS AGE IP NODE
ruoyi-backend-7568d4d857-2jqh7 1/1 Running 0 3m 10.244.1.23 worker232
ruoyi-frontend-7c5b6d984f-kg9wq 1/1 Running 0 2m 10.244.2.45 worker233六、访问验证
1.访问测试
# 所有访问节点添加
[master231]$ echo "10.0.0.231 ruoyi.k8s.local" >> /etc/hosts
浏览器访问：http://ruoyi.k8s.local:30080
-
使用账号：admin/caofacan2005 登录
七、关键问题排错指南
-
数据库连接异常：
[master231]$ kubectl exec -it mysql-pod -n ruoyi-system -- mysql -uroot -pcaofacan2005
-
Ingress未生效：
[master231]$ kubectl get ingress -n ruoyi-system [master231]$ kubectl logs -n ingress-nginx ingress-nginx-controller-xxxx
镜像构建需提前推送到私有仓库或使用本地镜像（需配置imagePullPolicy: Never）持久化存储需确保StorageClass可用Ingress需集群已安装Ingress Controller所有密码资源均使用"caofacan2005"如需调整资源限制，可添加resources配置Kubernetes 1.23版本兼容性已验证，API版本均适配该版本本文档完整适配主机名为master231/worker232/worker233的K8S集群环境，所有密码资源统一使用
caofacan2005，部署过程已通过实际环境验证。