The documentation you are viewing is for Dapr v1.12 which is an older version of Dapr. For up-to-date documentation, see the latest version.

设置 Google Kubernetes Engine （GKE）集群

设置 Google Kubernetes 服务集群

创建新群集

$ gcloud services enable container.googleapis.com && \
  gcloud container clusters create $CLUSTER_NAME \
  --zone $ZONE \
  --project $PROJECT_ID

更多选项请参阅 Google 云SDK 文档，或者通过云控制台创建集群以获取更多交互体验。

Sidecar 注入不适用于没有额外步骤的私有集群。为 master 节点自动创建的防火墙规则不会打开4000端口。这是 Dapr sidecar 注入所必需的。

审查相关防火墙规则：

$ gcloud compute firewall-rules list --filter="name~gke-${CLUSTER_NAME}-[0-9a-z]*-master"

要替换现有的规则并允许Kubernetes主访问端口4000：

$ gcloud compute firewall-rules update <firewall-rule-name> --allow tcp:10250,tcp:443,tcp:4000

$ gcloud container clusters get-credentials $CLUSTER_NAME \
    --zone $ZONE \
    --project $PROJECT_ID

注意： 最新的 Dapr helm chart 不再支持 Helm v2。请按照这篇文章 Helm 迁移指南从Helm v2 迁移到Helm v3。

如果您需要 Kubernetes 仪表板权限，(例如 configmaps is forbidden: User “system:serviceaccount:kube-system:kubernetes-dashboard” cannot list configmaps in the namespace “default” 等等），执行这个命令

kubectl create clusterrolebinding kubernetes-dashboard -n kube-system --clusterrole=cluster-admin --serviceaccount=kube-system:kubernetes-dashboard

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.