Kubernetes 中部署的 WordPress + MySQL - MySQL 連接錯誤

Question

在本地環境中使用 Wordpress + Mysql 的 Kubernetes 場景。

Wordpress Pod 無法連接到 Mysql 數據庫，Wordpress Pod 日志中出現以下錯誤：

MySQL Connection Error: (1045) Access denied for user 'root'@'10.44.0.5' (using password: YES)
Warning: mysqli::mysqli(): (HY000/1045): Access denied for user 'root'@'10.44.0.5' (using password: YES) in - on line 22

來自 kubernetes.io 鏈接的說明。 我所做的唯一更改是創建一個 Secret 資源來存儲密碼並從 Mysql 和 Wordpress 容器中指向。

apiVersion: v1
kind: Secret
metadata:
  name: mysql-pass
  namespace: default
data:
  password: cGFzc3dvcmQxMjMK     --> that is base64 of password123
type: Opaque

Pod 位於作為工作節點的 node1 上的默認命名空間中：

NAME                               READY   STATUS    RESTARTS   AGE   IP          NODE    
wordpress-554dfbbc47-hnr4n         0/1     Error     1          66s   10.44.0.5   node1   
wordpress-mysql-5477cbdfbf-29w2r   1/1     Running   0          74s   10.44.0.4   node1   

我對 mysql 沒有任何技能，但是如果我在 Mysql 容器中獲得 bash 並執行：

# mysql -u root -p
Enter password:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)

這里的服務輸出：

NAME              TYPE           CLUSTER-IP       EXTERNAL-IP    PORT(S)       
wordpress         LoadBalancer   10.107.114.255   192.168.1.83   80:32336/TCP   
wordpress-mysql   ClusterIP      None             <none>         3306/TCP       

MySql Pod 中的一些環境變量：

....
HOSTNAME=wordpress-mysql-5477cbdfbf-29w2r
MYSQL_MAJOR=5.6
MYSQL_ROOT_PASSWORD=password123
MYSQL_VERSION=5.6.50-1debian9
....

PersistentVolume 工作正常。

繼續進行故障排除非常困難。 幫助將不勝感激。

Answer 1

在為 Mysql 和 Wordpress 測試了不同的圖像並閱讀了 hub.docker.com mysql & wordpress上的有用鏈接后，我讓 Web 應用程序堆棧正常工作。

配置：

MySQL ：

apiVersion: v1
kind: Service
metadata:
name: wordpress-mysql
  labels:
    app: wordpress
spec:
  ports:
    - port: 3306
  selector:
    app: wordpress
    tier: mysql
  clusterIP: None

---

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: mysql-pv-claim
  labels:
    app: wordpress
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-storage
  resources:
    requests:
      storage: 1Gi

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: wordpress-mysql
  labels:
    app: wordpress
spec:
  selector:
    matchLabels:
      app: wordpress
      tier: mysql
  replicas: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: wordpress
        tier: mysql
    spec:
      containers:
      - image: mysql:5.7
        imagePullPolicy: IfNotPresent
        name: mysql
        env:
        - name: MYSQL_ROOT_PASSWORD
          valueFrom:
            secretKeyRef:
              name: root-pass
              key: password

        - name: MYSQL_DATABASE
          value: mysql

        - name: MYSQL_USER
          value: mysql

        - name: MYSQL_PASSWORD
          valueFrom:
            secretKeyRef:
              name: mysql-pass
              key: password

        ports:
        - containerPort: 3306
          name: mysql
        volumeMounts:
        - name: mysql-persistent-storage
          mountPath: /var/lib/mysql
      nodeSelector:
        storage: local
      volumes:
      - name: mysql-persistent-storage
        persistentVolumeClaim:
          claimName: mysql-pv-claim

WordPress ：

apiVersion: v1
kind: Service
metadata:
  name: wordpress
  labels:
    app: wordpress
spec:
  ports:
    - port: 80
  selector:
    app: wordpress
    tier: frontend
  type: LoadBalancer
  externalIPs:
  - 192.168.1.83

---

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: wp-pv-claim
  labels:
    app: wordpress
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: local-storage
  resources:
    requests:
      storage: 1Gi

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: wordpress
  labels:
    app: wordpress
spec:
  selector:
    matchLabels:
      app: wordpress
      tier: frontend
  replicas: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: wordpress
        tier: frontend
    spec:
      containers:
      - image: wordpress
        name: wordpress
        imagePullPolicy: IfNotPresent

        env:
        - name: WORDPRESS_DB_HOST
          value: wordpress-mysql

        - name: WORDPRESS_DB_PASSWORD
          valueFrom:
            secretKeyRef:
              name: mysql-pass
              key: password

        - name: WORDPRESS_DB_USER
          value: mysql

        - name: WORDPRESS_DB_NAME
          value: mysql

        ports:
        - containerPort: 80
          name: wordpress
        volumeMounts:
        - name: wordpress-persistent-storage
          mountPath: /var/www/html
      nodeSelector:
        storage: local
      volumes:
      - name: wordpress-persistent-storage
        persistentVolumeClaim:
          claimName: wp-pv-claim

輸出持久卷：

NAME             STATUS   VOLUME                        CAPACITY   ACCESS MODES   STORAGECLASS    
mysql-pv-claim   Bound    persistent-volume-mysql       4Gi        RWO            local-storage   
wp-pv-claim      Bound    persistent-volume-wordpress   2Gi        RWO            local-storage   

秘密：

apiVersion: v1
kind: Secret
metadata:
  name: root-pass
  namespace: default
data:
  password: cGFzc3dvcmQ=
type: Opaque

---

apiVersion: v1
kind: Secret
metadata:
  name: mysql-pass
  namespace: default
data:
  password: cGFzc3dvcmQ=
type: Opaque

我的示例配置注意事項：

• 在 node1 上創建目錄 /mysql/data & /wordpress/data （mysql 和 wordpress 容器的掛載點）。
• 用於 mysql -> mysql:5.7 的圖像
• 用於 wordpress 的圖像 -> wordpress
• 根據mysql和wordpress的文檔添加了環境變量。

Answer 2

你應用了你的秘密嗎？ 你的秘密在 kube env 中可用嗎？