Easysearch Operator 概述 #

┌────────────────────────────────────────────────────────────────┐
│  用户提交 SearchCluster YAML                                     │
│       ↓                                                        │
│  API Server 存储 CRD 对象                                       │
│       ↓                                                        │
│  Operator Controller (Reconcile Loop)                          │
│       │                                                        │
│       ├─→ 创建/管理 StatefulSet (Easysearch 节点)                │
│       ├─→ 创建/管理 Service (集群网络)                            │
│       ├─→ 创建/管理 PVC (持久化存储)                              │
│       ├─→ 创建/管理 ConfigMap/Secret (配置/凭证)                  │
│       ├─→ 创建/管理 Job (安全配置更新/快照任务)                    │
│       └─→ 创建/管理 PodDisruptionBudget (可用性保障)              │
│       ↓                                                        │
│  持续监控 → 发现偏差 → 自动修正 (自我修复)                        │
└────────────────────────────────────────────────────────────────┘

# 1. 部署 RBAC（ServiceAccount + ClusterRole + ClusterRoleBinding）
kubectl apply -f rbac.yaml

# 2. 部署 cert-manager 并创建证书
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/latest/download/cert-manager.yaml
kubectl apply -f certificates.yaml

# 3. 部署 Operator
kubectl apply -f operator-deployment.yaml

# 4. 部署 Easysearch 集群
kubectl apply -f easysearch-cluster.yaml

# 5. 验证集群状态
kubectl exec -it threenodes-masters-0 -- \
  curl -ku admin:PASSWORD https://localhost:9200/_cluster/health?pretty

nodePools:
  - component: masters
    replicas: 3
    diskSize: "10Gi"
    jvm: -Xmx2G -Xms2G
    roles:
      - "master"
    resources:
      requests:
        memory: "2Gi"
        cpu: "500m"
      limits:
        memory: "3Gi"
        cpu: "1"

  - component: data
    replicas: 5
    diskSize: "200Gi"
    jvm: -Xmx16G -Xms16G
    roles:
      - "data"
    resources:
      requests:
        memory: "16Gi"
        cpu: "2"
      limits:
        memory: "20Gi"
        cpu: "4"

  - component: coordinators
    replicas: 2
    diskSize: "10Gi"
    jvm: -Xmx4G -Xms4G
    roles:
      - "ingest"
    resources:
      requests:
        memory: "4Gi"
        cpu: "1"
      limits:
        memory: "6Gi"
        cpu: "2"

nodePools:
  - component: data
    replicas: 3
    nodeSelector:
      disktype: ssd
      node-role: easysearch-data
    # ...

# 给 K8s 节点打标签
kubectl label nodes node-1 node-role=easysearch-master
kubectl label nodes node-2 node-role=easysearch-master
kubectl label nodes node-3 node-role=easysearch-master

apiVersion: v1
kind: Service
metadata:
  name: easysearch-nodeport
spec:
  type: NodePort
  selector:
    app: threenodes     # 匹配 Easysearch Pod 的 label
  ports:
    - port: 9200
      targetPort: 9200
      nodePort: 30920   # 宿主机端口，范围 30000-32767

apiVersion: v1
kind: Service
metadata:
  name: easysearch-lb
spec:
  type: LoadBalancer
  selector:
    app: threenodes
  ports:
    - port: 9200
      targetPort: 9200

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: easysearch-ingress
  annotations:
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
spec:
  rules:
    - host: easysearch.example.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: threenodes
                port:
                  number: 9200

general:
  monitoring:
    enable: true

general:
  pluginsList:
    - analysis-ik
    - analysis-pinyin

# 1. 在有网络的环境中拉取并保存镜像
docker pull infinilabs/operator:latest
docker pull infinilabs/easysearch:1.7.0-223
docker save infinilabs/operator:latest -o operator.tar
docker save infinilabs/easysearch:1.7.0-223 -o easysearch.tar

# 2. 将镜像文件传输到离线环境并导入
docker load -i operator.tar
docker load -i easysearch.tar

# 3. 推送到私有仓库
docker tag infinilabs/operator:latest registry.internal.com/infinilabs/operator:latest
docker push registry.internal.com/infinilabs/operator:latest

spec:
  template:
    spec:
      imagePullSecrets:
        - name: my-registry-secret
      containers:
        - name: k8s-operator
          image: registry.internal.com/infinilabs/operator:latest

# 集群 A — 业务数据
apiVersion: infinilabs.infinilabs.com/v1
kind: SearchCluster
metadata:
  name: cluster-business
  namespace: easysearch-prod
# ...

# 集群 B — 日志分析
apiVersion: infinilabs.infinilabs.com/v1
kind: SearchCluster
metadata:
  name: cluster-logging
  namespace: easysearch-logs
# ...

# 删除 SearchCluster 资源（Operator 会自动清理关联的 StatefulSet、Service 等）
kubectl delete searchcluster threenodes -n default

# 注意：PVC 默认不会自动删除，需要手动清理
kubectl delete pvc data-threenodes-masters-0 data-threenodes-masters-1 data-threenodes-masters-2

# 删除 Operator Deployment
kubectl delete deployment k8s-operator -n default

# 清理 RBAC 资源
kubectl delete clusterrolebinding manager-rolebinding
kubectl delete clusterrole manager-role
kubectl delete serviceaccount controller-manager -n default

# 清理证书资源（可选）
kubectl delete certificate ca-certificate easysearch-certs easysearch-admin-certs -n default
kubectl delete issuer selfsigned-issuer ca-issuer -n default