云原生环境中的存储管理

键盘鼓手苏苏

3246人浏览 · 2026-04-16 11:22:14

键盘鼓手苏苏 · 2026-04-16 11:22:14 发布

云原生环境中的存储管理

🔥 硬核开场

各位技术老铁，今天咱们聊聊云原生环境中的存储管理。别跟我扯那些理论，直接上干货！在云原生时代，存储管理已经成为保证应用数据安全和性能的关键。不了解云原生环境中的存储管理？那你的应用可能随时面临数据丢失、性能瓶颈或存储资源浪费的风险。

📋 核心概念

云原生存储的定义

云原生存储是指为云原生应用设计的存储解决方案，它具有以下特点：

动态性：能够根据应用的需求动态分配和释放存储资源
可扩展性：支持水平扩展，以应对不断增长的数据量
高可用性：提供数据冗余和故障转移机制，确保数据的可用性
容器友好：与容器编排平台（如Kubernetes）无缝集成
API驱动：通过API进行管理，支持自动化操作

Kubernetes存储资源

PersistentVolume (PV)：集群级别的存储资源
PersistentVolumeClaim (PVC)：用户对存储资源的请求
StorageClass：定义存储资源的类型和属性
Volume：Pod级别的存储挂载点
StatefulSet：用于管理有状态应用的控制器

🚀 实践指南

1. 存储类配置

本地存储类

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: local-storage
provisioner: kubernetes.io/no-provisioner
volumeBindingMode: WaitForFirstConsumer

Ceph存储类

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: csi-rbd-sc
provisioner: rbd.csi.ceph.com
parameters:
  clusterID: <cluster-id>
  pool: kubernetes
  imageFormat: "2"
  imageFeatures: layering
  csi.storage.k8s.io/provisioner-secret-name: csi-rbd-secret
  csi.storage.k8s.io/provisioner-secret-namespace: kube-system
  csi.storage.k8s.io/controller-expand-secret-name: csi-rbd-secret
  csi.storage.k8s.io/controller-expand-secret-namespace: kube-system
  csi.storage.k8s.io/node-stage-secret-name: csi-rbd-secret
  csi.storage.k8s.io/node-stage-secret-namespace: kube-system
  csi.storage.k8s.io/fstype: ext4
reclaimPolicy: Delete
allowVolumeExpansion: true
volumeBindingMode: Immediate

2. 持久卷配置

静态持久卷

apiVersion: v1
kind: PersistentVolume
metadata:
  name: local-pv
spec:
  capacity:
    storage: 10Gi
  accessModes:
  - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
  storageClassName: local-storage
  local:
    path: /mnt/disks/ssd1
  nodeAffinity:
    required:
      nodeSelectorTerms:
      - matchExpressions:
        - key: kubernetes.io/hostname
          operator: In
          values:
          - node1

动态持久卷

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: ceph-pvc
  namespace: default
spec:
  accessModes:
  - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi
  storageClassName: csi-rbd-sc

3. 有状态应用管理

StatefulSet配置

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: mysql
  namespace: default
spec:
  serviceName: mysql
  replicas: 3
  selector:
    matchLabels:
      app: mysql
  template:
    metadata:
      labels:
        app: mysql
    spec:
      containers:
      - name: mysql
        image: mysql:8.0
        env:
        - name: MYSQL_ROOT_PASSWORD
          valueFrom:
            secretKeyRef:
              name: mysql-secret
              key: password
        ports:
        - containerPort: 3306
        volumeMounts:
        - name: mysql-data
          mountPath: /var/lib/mysql
  volumeClaimTemplates:
  - metadata:
      name: mysql-data
    spec:
      accessModes:
      - ReadWriteOnce
      resources:
        requests:
          storage: 20Gi
      storageClassName: csi-rbd-sc

4. 存储备份与恢复

Velero部署

# 安装Velero
helm repo add vmware-tanzu https://vmware-tanzu.github.io/helm-charts
helm repo update
helm install velero vmware-tanzu/velero --namespace velero --create-namespace --set configuration.provider=aws --set credentials.useSecret=false --set configuration.backupStorageLocation.name=default --set configuration.backupStorageLocation.provider=aws --set configuration.backupStorageLocation.bucket=velero-backups --set configuration.backupStorageLocation.config.region=us-east-1

# 创建备份
velero backup create mysql-backup --include-namespaces default

# 恢复备份
velero restore create --from-backup mysql-backup

5. 存储监控与性能优化

Prometheus存储监控

apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: ceph-metrics
  namespace: monitoring
spec:
  selector:
    matchLabels:
      app: ceph
  endpoints:
  - port: metrics
    interval: 15s

存储性能优化

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: csi-rbd-sc-ssd
provisioner: rbd.csi.ceph.com
parameters:
  clusterID: <cluster-id>
  pool: kubernetes-ssd
  imageFormat: "2"
  imageFeatures: layering
  csi.storage.k8s.io/provisioner-secret-name: csi-rbd-secret
  csi.storage.k8s.io/provisioner-secret-namespace: kube-system
  csi.storage.k8s.io/controller-expand-secret-name: csi-rbd-secret
  csi.storage.k8s.io/controller-expand-secret-namespace: kube-system
  csi.storage.k8s.io/node-stage-secret-name: csi-rbd-secret
  csi.storage.k8s.io/node-stage-secret-namespace: kube-system
  csi.storage.k8s.io/fstype: ext4
reclaimPolicy: Delete
allowVolumeExpansion: true
volumeBindingMode: Immediate