k8s 集群安全地清空一个节点 清空节点 kubectl drain <node name> 问题 ➜ ~ kubectl drain xdf-31-kvm-python-107 node/xdf-31-kvm-python-107 already cordoned error: unable to drain node "xdf-31-kvm-python-107" due to error:[cannot delete Pods with local storage (use --delete-emptydir-data to override): ailearn-dev/ailearn-composer-interface-v1-f6f756895-wpnx5, ailearn-dev/ailearn-instruction-proxy-svr-v1-666d48bb6d-wlclh, ailearn-dev/kubevpn.traffic.manager, argocd/argocd-dex-server-5665ffc49-j5q2n, kube-system/metrics-server-799d467fd5-7tvc7, cannot delete DaemonSet-managed Pods (use --ignore-daemonsets to ignore): kube-system/calico-node-rcgw7, kube-system/kube-proxy-5rlmq, metallb-system/speaker-rbbvp, monitoring/node-exporter-5sl72], continuing command... There are pending nodes to be drained: xdf-31-kvm-python-107 cannot delete Pods with local storage (use --delete-emptydir-data to override): ailearn-dev/ailearn-composer-interface-v1-f6f756895-wpnx5, ailearn-dev/ailearn-instruction-proxy-svr-v1-666d48bb6d-wlclh, ailearn-dev/kubevpn.traffic.manager, argocd/argocd-dex-server-5665ffc49-j5q2n, kube-system/metrics-server-799d467fd5-7tvc7 cannot delete DaemonSet-managed Pods (use --ignore-daemonsets to ignore): kube-system/calico-node-rcgw7, kube-system/kube-proxy-5rlmq,……

升级k8s 集群(1.19–>1.20) 官方文档: https://v1-20.docs.kubernetes.io/zh/docs/tasks/administer-cluster/kubeadm/kubeadm-upgrade/#%E5%8D%87%E7%BA%A7-kubelet-%E5%92%8C-kubectl-1 升级master(来自官方文档，未验证) 执行 “kubeadm upgrade” 升级第一个master节点 升级 kubeadm yum install -y kubeadm-1.20.15-0 --disableexcludes=kubernetes 验证下载操作正常，并且 kubeadm 版本正确 [root@xdf-14-python-base-57 ~]# kubeadm version kubeadm……

X-Frame-Options 用来给浏览器指示允许一个页面可否在 、、 或者 中展现的标记。站点可以通过确保网站没有被嵌入到别人的站点里面，从而避免点击劫持攻击 语法 # http,server,location X-Frame-Options: DENY X-Frame-Options: SAMEORIGIN DENY: 表示该页面不允许在 frame 中展示，即便是在相同域名的页面中嵌套……

参考文档： https://www.cnblogs.com/sandshell/p/11673658.html#autoid-7-3-0 要求 使用内部解析 内部解析如果失败，使用公网解析 dns 集群使用 环境 系统版本：Centos 7.3 192.168.112.231(主DNS) 192.168.112.9(从DNS) 192.168.112.……

基于 acme.sh 自动更新 APISIX SSL 证书 安装 openssl , jq 略 安装acme.sh curl https://get.acme.sh | sh -s email=my@example.com my@example.com 替换成自己的邮箱，用于ZeroSSL.com 账号注册，acme.sh 默认CA 已经更新为ZeroSSL了，而ZeroSSL 需要邮箱地址注……

flush-hosts问题 问题 连接mysql时出现下面错误 "Host '192.168.1.100' is blocked because of many connection errors; unblock with 'mysqladmin flush-hosts'" 原因 同一个ip在短时间内产生太多(超过mysql数据库max_connection_errors的最大值)中断的数据……

跨域问题 产生跨域的原因 浏览器的限制 跨域 XHR(XMLHttpRequest)请求 解决思路 JSONP nginx 代理 浏览器禁止检查跨域 浏览器禁止检查跨域(以 chrome 为例) 彻底关闭 chrome 使用命令行启动 mac open -a "Google Chrome" --args --disable-web-security --user-data-dir windows /PATH_TO/chrome.exe --args --disable-web-security --user-data-dir # 也可……

磁盘扩容 有分区 root@aws-wlomni-jp-52-154:~# growpart /dev/xvdf 1 CHANGED: partition=1 start=2048 old: size=1048573919 end=1048575967 new: size=2147481567,end=2147483615 root@aws-wlomni-jp-52-154:~# root@aws-wlomni-jp-52-154:~# resize2fs /dev/xvdf1 resize2fs 1.42.13 (17-May-2015) Filesystem at /dev/xvdf1 is mounted on /databackup; on-line resizing required old_desc_blocks = 32, new_desc_blocks = 64 The filesystem on /dev/xvdf1 is now 268435195 (4k) blocks long. 无分区 resize2fs /dev/xvdf1……

nginx添加配置文件websocket.conf 下面文件的domain, upstream,ssl根据自己情况修改 map $http_upgrade $connection_upgrade { default upgrade; '' close; } upstream websocket { server localhost:8282; # appserver_ip:ws_port } server { listen 80; server_name websocket.abc.com; location / { proxy_pass http://websocket; proxy_read_timeout 300s; proxy_send_timeout 300s; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_http_version 1.1;……

Python 获取本机 ip地址 其它方法如果有多个 ip或者是装了 docker 后,产生多个虚拟的网卡后, 得到的结果 就不准确了 import socket import uuid def get_host_ip(): """ 查询本机ip地址 :return: ip """ ip = str(uuid.uuid1()).replace('-', '') try: s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) s.connect(('8.8.8.8', 80)) ip = s.getsockname()[0] except: pass finally: s.close() return ip……