January 2026
Intermediate to advanced
392 pages
4h 44m
Chinese
Content preview from Kubernetes 认证管理员 (CKA) 学习指南 (Chinese Edition), 2nd Edition
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
第4章 集群 安装与升级
本作品已使用人工智能进行翻译。欢迎您提供反馈和意见：translation-feedback@oreilly.com
课程的第一部分涉及Kubernetes管理员应掌握的典型任务。这些任务包括理解Kubernetes集群的架构组件 、从零搭建集群，以及后续的集群维护工作。本章结束时，您将掌握安装和维护Kubernetes集群的工具与流程。
基础设施配置
Kubernetes集群节点所需的基础设施 包含服务器、网络和存储资源。通过配置本地或云端资源（理想情况下采用自动化方式）完成基础设施配置。这正是Ansible和Terraform 等基础设施自动化工具的价值所在。
尽管课程考试中提及了"基础设施配置"，但该主题的深入探讨超出本书范围且与Kubernetes关联性不强。若您对此主题 更感兴趣，可参阅书籍 《基础设施即代码》 （Kief Morris著，O’Reilly出版社，2025年）。
理解扩展接口
第二章奠定了理解Kubernetes架构、节点类型及其集群组件的基础。Kubernetes架构采用灵活、模块化且可扩展的设计，使平台核心功能得以扩展。 您可通过扩展功能增强集群能力。扩展组件（ ）是可接入平台的插件，用于支持Kubernetes原生功能之外的定制化需求。这类插件通常包含网络插件、设备插件和存储插件等功能模块。
本节将阐述Kubernetes管理员必须掌握的关键接口：
容器网络接口（CNI）
CNI（ ）是一套规范及配套库，用于编写插件以配置Linux容器中的网络接口。在Kubernetes中，CNI负责建立集群内运行Pod之间的网络连接。需在控制平面节点安装CNI插件才能正常运行。"安装Pod网络附加组件"展示了CNI的安装流程。
常用选项包括 Calico、flannel、Cilium 以及 AWS VPC CNI 和 Azure CNI 等 Cloud 平台专属解决方案。
容器运行时接口（CRI）
容器运行时（ ）负责管理容器的生命周期，并确保容器获得其请求的资源。Kubernetes默认使用containerd作为容器运行时，但您可根据需要替换为其他容器运行时。CRI（容器运行时接口）是促进Kubernetes与不同容器运行时交互的API。
常见提供商包括 containerd（最流行）、CRI-O、Docker Engine（通过 cri-dockerd）以及 Mirantis 容器运行时，目前约有 10-15 种符合 CRI 规范的可投入生产环境的运行时选项。
容器存储接口（CSI）
尽管Kubernetes提供了卷插件系统 ，但第三方存储方案的集成仍存在困难。为此，CSI作为标准应运而生，用于实现将任意块存储和文件存储系统集成到容器化工作负载的插件。
主流供应商包括AWS EBS CSI、Azure Disk CSI和GCE Persistent Disk CSI等云原生方案，以及NetApp、Pure Storage、Portworx和Rook/Ceph等存储系统驱动程序。生态系统中已提供逾百种CSI驱动程序，覆盖从云服务商到传统存储供应商的各类存储后端 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.