在每次安装头盔时重新创建作业或删除旧作业

Question

我已经创建了 Kubernetes 作业，并且作业已创建，但部署到 Kubernetes 集群时失败。当我尝试使用 Helm 重新部署它时，作业并未重新部署（删除旧作业并重新创建新作业，与微服务部署不同）。

如何在 Kubernetes 中实现此重新部署作业而不需要手动删除它？我可以告诉它重新创建容器吗？

job.yaml

包含：

apiVersion: batch/v1
kind: Job
metadata:
  name: "{{ .Release.Name }}-init-job"
  namespace: {{ .Release.Namespace }}
spec:
  template:
    metadata:
      annotations:
        linkerd.io/inject: disabled
        "helm.sh/hook-delete-policy": before-hook-creation
        "helm.sh/hook": pre-install,pre-upgrade,pre-delete
        "helm.sh/hook-weight": "-5"
    spec:
      serviceAccountName: {{ .Release.Name }}-init-service-account
      containers:
        - name: app-installer
          image: some image
          command:
            - /bin/bash
            - -c
            - echo Hello executing k8s init-container
          securityContext:
            readOnlyRootFilesystem: true
      restartPolicy: OnFailure

工作没有被重新部署

kubectl get jobs -n namespace

NAME                    COMPLETIONS   DURATION   AGE
test-init-job   0/1           13h        13h

kubectl 描述作业 test-init-job -n test

Name:           test-init-job
Namespace:      test
Selector:       controller-uid=86370470-0964-42d5-a9c1-00c8a462239f
Labels:         app.kubernetes.io/managed-by=Helm
Annotations:    meta.helm.sh/release-name: test
                meta.helm.sh/release-namespace: test
Parallelism:    1
Completions:    1
Start Time:     Fri, 14 Oct 2022 18:03:31 +0530
Pods Statuses:  0 Running / 0 Succeeded / 1 Failed
Pod Template:
  Labels:           controller-uid=86370470-0964-42d5-a9c1-00c8a462239f
                    job-name=test-init-job
  Annotations:      helm.sh/hook: pre-install,pre-upgrade
                    helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
                    helm.sh/hook-weight: -5
                    linkerd.io/inject: disabled
  Service Account:  test-init-service-account
  Containers:
   test-app-installer:
    Image:      artifactory/test-init-container:1.0.0
    Port:       <none>
    Host Port:  <none>
    Environment:
      test.baseUrl:         baser
      test.authType:        basic
      test.basic.username:  jack
      test.basic.password:  password
    Mounts:
      /etc/test/config from test-installer-config-vol (ro)
  Volumes:
   test-installer-config-vol:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      test-installer-config-files
    Optional:  false
Events:        <none>

Answer 1

作业无法重新部署，因为它们的模板是不可变的。

如果您收到消息

cannot patch "..." with kind Job: Job.batch "db-sync-download-snapshot" is invalid: spec.template: Invalid value: ... field is immutable

，这就是原因。

只需删除作业，或创建作业并在名称后添加

$VERSION

。

使用 GitOps，

$VERSION

应该是

$CI_COMMIT_HASH

。

替换 Helm 模板中的

name

：

  metadata:
    name: "{{ .Release.Name }}-init-job-{{ .Release.revision }}"

Answer 2

设置

ttlSecondsAfterFinished

，请参阅：https://kubernetes.io/docs/concepts/workloads/controllers/job/#ttl-mechanism-for-finished-jobs