一、容器的生命周期postStart和preStop

[root@master231 probe]# cat 09-deploy-lifecycle-postStart-preStop.yaml 
apiVersion: v1
kind: Pod
metadata:
  name: lifecycle-poststart-prestop-001
spec:
  volumes:
  - name: data
    hostPath:
      path: /dingzhiyan-linux
  # 在pod優雅終止時，定義延遲發送kill信號的時間，此時間可用于pod處理完未處理的請求等狀況。
  # 默認單位是秒，若不設置默認值為30s。
  #terminationGracePeriodSeconds: 60
  terminationGracePeriodSeconds: 3
  containers:
  - name: c1
    image: registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1
    volumeMounts:
    - name: data
      mountPath: /data
    # 定義容器的生命周期。
    lifecycle:
      # 容器啟動之后做的事情，如果次函數未執行完成，容器始終處于:' ContainerCreating'狀態。
      postStart:
        exec:
          command: 
          - "/bin/sh"
          - "-c"
          - "sleep 30;echo \"postStart at $(date +%F_%T)\" >> /data/postStart.log"
      # 容器停止之前做的事情
      preStop:
        exec:
         command: 
         - "/bin/sh"
         - "-c"
         - "sleep 20;echo \"preStop at $(date +%F_%T)\" >> /data/preStop.log"

二、kubelet啟動容器的原理圖解

1.kubelet創建Pod的全流程

• 1.kubelet調用CRI接口創建容器，底層支持docker|containerd作為容器運行時;
• 2.底層基于runc（符合OCI規范）創建容器：
• 3.優先創建pause基礎鏡像;
• 4.創建初始化容器
• 5.業務容器，業務容器如果定義了優雅終止，探針則順序如下：
  • 5.1 啟動命令【COMMAND】
  • 5.2 啟動postStart;
  • 5.3 Probe
    - StartupProbe
    - LivenessProbe | readinessProbe
  • 5.4 啟動PreStop
    受限于優雅終止時間（默認30s）。

2.測試案例

[root@master231 pods]# cat 25-shaonao-workflow.yaml 
apiVersion: v1
kind: Pod
metadata:
  name: pods-workflow-001
spec:
  volumes:
  - name: data
    hostPath:
      path: /dingzhiyan-shaonao
  initContainers:
  - name: init01
    image: registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v1
    volumeMounts:
    - name: data
      mountPath: /dingzhiyan
    command:
    - "/bin/sh"
    - "-c"
    - "echo \"initContainer at $(date +%F_%T)\" > /dingzhiyan/haha.log"
  terminationGracePeriodSeconds: 3
  containers:
  - name: c1
    image: registry.cn-hangzhou.aliyuncs.com/yinzhengjie-k8s/apps:v3
    command:
    - /bin/sh
    - -c
    - "echo \"command at $(date +%F_%T)\" >> /usr/share/nginx/html/haha.log; sleep 600"
    volumeMounts:
    - name: data
      mountPath: /usr/share/nginx/html
    imagePullPolicy: IfNotPresent
    livenessProbe:
      exec:
        command:
        - "/bin/sh"
        - "-c"
        - "echo \"livenessProbe at $(date +%F_%T)\" >> /usr/share/nginx/html/haha.log"
      failureThreshold: 3
      initialDelaySeconds: 0
      periodSeconds: 3
      successThreshold: 1
      timeoutSeconds: 1
    readinessProbe:
      exec:
        command:
        - "/bin/sh"
        - "-c"
        - "echo \"readinessProbe at $(date +%F_%T)\" >> /usr/share/nginx/html/haha.log"
      failureThreshold: 3
      initialDelaySeconds: 0
      periodSeconds: 3
      successThreshold: 1
      timeoutSeconds: 1
    startupProbe:
      exec:
        command:
        - "/bin/sh"
        - "-c"
        - "echo \"startupProbe at $(date +%F_%T)\" >> /usr/share/nginx/html/haha.log"
      failureThreshold: 3
      initialDelaySeconds: 0
      periodSeconds: 3
      successThreshold: 1
      timeoutSeconds: 1
    lifecycle:
      postStart:
        exec:
          command: 
          - "/bin/sh"
          - "-c"
          - "sleep 10;echo \"postStart at $(date +%F_%T)\" >> /usr/share/nginx/html/haha.log"
      preStop:
        exec:
          command: 
          - "/bin/sh"
          - "-c"
          - "echo \"preStop at $(date +%F_%T)\" >> /usr/share/nginx/html/haha.log;sleep 30"
[root@master231 pods]# 	

3.測試驗證

[root@worker233 ~]# tail -100f  /dingzhiyan-shaonao/haha.log 
initContainer at 2025-04-20_07:34:44
command at 2025-04-20_07:34:45
postStart at 2025-04-20_07:34:55
startupProbe at 2025-04-20_07:34:56
readinessProbe at 2025-04-20_07:34:56
livenessProbe at 2025-04-20_07:34:59
readinessProbe at 2025-04-20_07:34:59
readinessProbe at 2025-04-20_07:35:02
livenessProbe at 2025-04-20_07:35:02
livenessProbe at 2025-04-20_07:35:05
...
preStop at 2025-04-20_07:36:29

三、實現端口轉發

1.準備Pod

[root@master231 scheduler]# kubectl get pods -o wide
NAME                                      READY   STATUS    RESTARTS   AGE   IP               NODE        NOMINATED NODE   READINESS GATES
scheduler-nodeselector-774bf9875f-8hs2f   1/1     Running   0          28s   10.100.203.133   worker232   <none>           <none>
scheduler-nodeselector-774bf9875f-mr8zf   1/1     Running   0          28s   10.100.203.147   worker232   <none>           <none>
scheduler-nodeselector-774bf9875f-tn5rp   1/1     Running   0          28s   10.100.203.140   worker232   <none>           <none>
scheduler-nodeselector-774bf9875f-vbzs2   1/1     Running   0          28s   10.100.203.141   worker232   <none>           <none>
scheduler-nodeselector-774bf9875f-wstzv   1/1     Running   0          28s   10.100.203.144   worker232   <none>           <none>
[root@master231 scheduler]# 

2.端口轉發

[root@master231 scheduler]# kubectl port-forward po/scheduler-nodeselector-774bf9875f-8hs2f 9999:80 --address=0.0.0.0
Forwarding from 0.0.0.0:9999 -> 80
Handling connection for 9999
Handling connection for 9999

3.測試驗證

http://10.0.0.231:9999/