Kubernetes 中部署的 WordPress + MySQL - MySQL 连接错误

Question

在本地环境中使用 Wordpress + Mysql 的 Kubernetes 场景。

Wordpress Pod 无法连接到 Mysql 数据库，Wordpress Pod 日志中出现以下错误：

MySQL Connection Error: (1045) Access denied for user 'root'@'10.44.0.5' (using password: YES)
Warning: mysqli::mysqli(): (HY000/1045): Access denied for user 'root'@'10.44.0.5' (using password: YES) in - on line 22

来自 kubernetes.io 链接的说明。 我所做的唯一更改是创建一个 Secret 资源来存储密码并从 Mysql 和 Wordpress 容器中指向。

apiVersion: v1
kind: Secret
metadata:
  name: mysql-pass
  namespace: default
data:
  password: cGFzc3dvcmQxMjMK     --> that is base64 of password123
type: Opaque

Pod 位于作为工作节点的 node1 上的默认命名空间中：

NAME                               READY   STATUS    RESTARTS   AGE   IP          NODE    
wordpress-554dfbbc47-hnr4n         0/1     Error     1          66s   10.44.0.5   node1   
wordpress-mysql-5477cbdfbf-29w2r   1/1     Running   0          74s   10.44.0.4   node1   

我对 mysql 没有任何技能，但是如果我在 Mysql 容器中获得 bash 并执行：

# mysql -u root -p
Enter password:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)

这里的服务输出：

NAME              TYPE           CLUSTER-IP       EXTERNAL-IP    PORT(S)       
wordpress         LoadBalancer   10.107.114.255   192.168.1.83   80:32336/TCP   
wordpress-mysql   ClusterIP      None             <none>         3306/TCP       

MySql Pod 中的一些环境变量：

....
HOSTNAME=wordpress-mysql-5477cbdfbf-29w2r
MYSQL_MAJOR=5.6
MYSQL_ROOT_PASSWORD=password123
MYSQL_VERSION=5.6.50-1debian9
....

PersistentVolume 工作正常。

继续进行故障排除非常困难。 帮助将不胜感激。

Answer 1

在为 Mysql 和 Wordpress 测试了不同的图像并阅读了 hub.docker.com mysql & wordpress上的有用链接后，我让 Web 应用程序堆栈正常工作。

配置：

MySQL ：

apiVersion: v1
kind: Service
metadata:
name: wordpress-mysql
  labels:
    app: wordpress
spec:
  ports:
    - port: 3306
  selector:
    app: wordpress
    tier: mysql
  clusterIP: None

---

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: mysql-pv-claim
  labels:
    app: wordpress
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-storage
  resources:
    requests:
      storage: 1Gi

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: wordpress-mysql
  labels:
    app: wordpress
spec:
  selector:
    matchLabels:
      app: wordpress
      tier: mysql
  replicas: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: wordpress
        tier: mysql
    spec:
      containers:
      - image: mysql:5.7
        imagePullPolicy: IfNotPresent
        name: mysql
        env:
        - name: MYSQL_ROOT_PASSWORD
          valueFrom:
            secretKeyRef:
              name: root-pass
              key: password

        - name: MYSQL_DATABASE
          value: mysql

        - name: MYSQL_USER
          value: mysql

        - name: MYSQL_PASSWORD
          valueFrom:
            secretKeyRef:
              name: mysql-pass
              key: password

        ports:
        - containerPort: 3306
          name: mysql
        volumeMounts:
        - name: mysql-persistent-storage
          mountPath: /var/lib/mysql
      nodeSelector:
        storage: local
      volumes:
      - name: mysql-persistent-storage
        persistentVolumeClaim:
          claimName: mysql-pv-claim

WordPress ：

apiVersion: v1
kind: Service
metadata:
  name: wordpress
  labels:
    app: wordpress
spec:
  ports:
    - port: 80
  selector:
    app: wordpress
    tier: frontend
  type: LoadBalancer
  externalIPs:
  - 192.168.1.83

---

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: wp-pv-claim
  labels:
    app: wordpress
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-storage
  resources:
    requests:
      storage: 1Gi

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: wordpress
  labels:
    app: wordpress
spec:
  selector:
    matchLabels:
      app: wordpress
      tier: frontend
  replicas: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: wordpress
        tier: frontend
    spec:
      containers:
      - image: wordpress
        name: wordpress
        imagePullPolicy: IfNotPresent

        env:
        - name: WORDPRESS_DB_HOST
          value: wordpress-mysql

        - name: WORDPRESS_DB_PASSWORD
          valueFrom:
            secretKeyRef:
              name: mysql-pass
              key: password

        - name: WORDPRESS_DB_USER
          value: mysql

        - name: WORDPRESS_DB_NAME
          value: mysql

        ports:
        - containerPort: 80
          name: wordpress
        volumeMounts:
        - name: wordpress-persistent-storage
          mountPath: /var/www/html
      nodeSelector:
        storage: local
      volumes:
      - name: wordpress-persistent-storage
        persistentVolumeClaim:
          claimName: wp-pv-claim

输出持久卷：

NAME             STATUS   VOLUME                        CAPACITY   ACCESS MODES   STORAGECLASS    
mysql-pv-claim   Bound    persistent-volume-mysql       4Gi        RWO            local-storage   
wp-pv-claim      Bound    persistent-volume-wordpress   2Gi        RWO            local-storage   

秘密：

apiVersion: v1
kind: Secret
metadata:
  name: root-pass
  namespace: default
data:
  password: cGFzc3dvcmQ=
type: Opaque

---

apiVersion: v1
kind: Secret
metadata:
  name: mysql-pass
  namespace: default
data:
  password: cGFzc3dvcmQ=
type: Opaque

我的示例配置注意事项：

• 在 node1 上创建目录 /mysql/data & /wordpress/data （mysql 和 wordpress 容器的挂载点）。
• 用于 mysql -> mysql:5.7 的图像
• 用于 wordpress 的图像 -> wordpress
• 根据mysql和wordpress的文档添加了环境变量。

Answer 2

你应用了你的秘密吗？ 你的秘密在 kube env 中可用吗？