kind: ConfigMap
apiVersion: v1
metadata:
  name: redis-cluster-cm
data:
  init-redis-cluster.sh: |2-
        #!/bin/bash
        set -e

        # 直接在腳本中聲明變量
        REDIS_PASSWORD="ClusterRedis#20251112"
        SERVICE_NAME="redis-cluster"

        NODES=(
          "redis-cluster-0.$SERVICE_NAME:6379"
          "redis-cluster-1.$SERVICE_NAME:6379"
          "redis-cluster-2.$SERVICE_NAME:6379"
          "redis-cluster-3.$SERVICE_NAME:6379"
          "redis-cluster-4.$SERVICE_NAME:6379"
          "redis-cluster-5.$SERVICE_NAME:6379"
        )

        echo "檢查所有 Redis 節(jié)點(diǎn)是否就緒..."
        all_ready=1
        for node in "${NODES[@]}"; do
          host=$(echo "$node" | cut -d: -f1)
          port=$(echo "$node" | cut -d: -f2)
          echo "檢查節(jié)點(diǎn): $host:$port"
          if [ "$(redis-cli -h $host -p $port -a $REDIS_PASSWORD ping 2>/dev/null)" != "PONG" ]; then
            echo "節(jié)點(diǎn) $node 未就緒"
            all_ready=0
            break
          else
            echo "節(jié)點(diǎn) $node 已就緒"
          fi
        done

        if [ $all_ready -ne 1 ]; then
          echo "有節(jié)點(diǎn)未就緒，退出"
          exit 0
        fi

        echo "檢查集群狀態(tài)..."
        cluster_state=$(redis-cli -h ${NODES[0]%:*} -p ${NODES[0]#*:} -a $REDIS_PASSWORD cluster info 2>/dev/null | grep "cluster_state" | cut -d: -f2 | tr -d '[:space:]')
        if [ "$cluster_state" = "ok" ]; then
          echo "集群已初始化，狀態(tài)正常"
          exit 0
        fi

        echo "開始初始化 Redis 集群..."
        redis-cli -a $REDIS_PASSWORD \
          --cluster create \
          --cluster-replicas 1 \
          ${NODES[@]} 

        
        echo "集群初始化完成"
        
  redis-cluster.conf: |
    bind 0.0.0.0
    port 6379
    daemonize no
    protected-mode no
    dir /data
    cluster-announce-bus-port 16379
    cluster-enabled yes
    cluster-node-timeout 15000
    cluster-config-file /data/nodes.conf
    requirepass ClusterRedis#20251112
    masterauth ClusterRedis#20251112

    # backup settings
    # aof backup mode
    save 3600 1
    stop-writes-on-bgsave-error no
    appendonly yes
    appendfilename "appendonly.aof"
    appendfsync everysec
    no-appendfsync-on-rewrite no
    auto-aof-rewrite-percentage 100
    auto-aof-rewrite-min-size 64mb
    aof-load-truncated yes
    maxmemory 16G
    maxmemory-policy allkeys-lru

#!/bin/bash
# 1. 指定腳本解釋器為bash，確保在K8s容器（通常為L(zhǎng)inux環(huán)境）中可正常執(zhí)行
set -e
# 2. 容錯(cuò)配置：腳本中任一命令返回非0狀態(tài)碼（執(zhí)行失?。r(shí)，立即退出腳本
#    避免錯(cuò)誤延續(xù)（如某節(jié)點(diǎn)未就緒仍強(qiáng)行創(chuàng)建集群，導(dǎo)致集群初始化失?。?

# -------------------------- 變量定義部分 --------------------------
# 3. Redis密碼變量：統(tǒng)一管理客戶端連接與主從同步密碼，避免硬編碼分散
#    密碼含大小寫、數(shù)字、特殊字符（ClusterRedis#20251112），滿足基礎(chǔ)安全復(fù)雜度，防止未授權(quán)訪問
REDIS_PASSWORD="ClusterRedis#20251112"
# 4. K8s Service名變量：對(duì)應(yīng)Redis集群的Service名稱（redis-cluster）
#    后續(xù)節(jié)點(diǎn)地址拼接時(shí)使用Service域名（如redis-cluster-0.redis-cluster），適配K8s Pod動(dòng)態(tài)IP特性
SERVICE_NAME="redis-cluster"
# 5. 集群節(jié)點(diǎn)列表：定義6個(gè)節(jié)點(diǎn)（3主3從架構(gòu)，Redis Cluster最小高可用架構(gòu)）
#    地址格式為“Pod名.Service名:端口”，K8s中通過該域名可穩(wěn)定訪問各Pod（無需依賴動(dòng)態(tài)IP）
NODES=(
  "redis-cluster-0.$SERVICE_NAME:6379"
  "redis-cluster-1.$SERVICE_NAME:6379"
  "redis-cluster-2.$SERVICE_NAME:6379"
  "redis-cluster-3.$SERVICE_NAME:6379"
  "redis-cluster-4.$SERVICE_NAME:6379"
  "redis-cluster-5.$SERVICE_NAME:6379"
)

# -------------------------- 節(jié)點(diǎn)就緒檢查部分 --------------------------
echo "檢查所有 Redis 節(jié)點(diǎn)是否就緒..."
all_ready=1
# 6. 循環(huán)遍歷所有節(jié)點(diǎn)：確保集群初始化前，所有節(jié)點(diǎn)均已啟動(dòng)并能正常響應(yīng)
for node in "${NODES[@]}"; do
  # 7. 拆分節(jié)點(diǎn)地址為“主機(jī)名”和“端口”：從節(jié)點(diǎn)字符串（如xxx:6379）中提取關(guān)鍵信息，用于后續(xù)ping檢查
  host=$(echo "$node" | cut -d: -f1)
  port=$(echo "$node" | cut -d: -f2)
  echo "檢查節(jié)點(diǎn): $host:$port"
  # 8. Redis節(jié)點(diǎn)可用性檢查：通過redis-cli ping命令判斷節(jié)點(diǎn)是否存活
  #    -h $host：指定節(jié)點(diǎn)主機(jī)名（K8s Service域名）
  #    -p $port：指定Redis客戶端端口（6379，與配置文件一致）
  #    -a $REDIS_PASSWORD：攜帶密碼認(rèn)證（避免未授權(quán)訪問攔截）
  #    2>/dev/null：屏蔽錯(cuò)誤輸出（如連接超時(shí)的報(bào)錯(cuò)），僅通過“PONG”判斷狀態(tài)，避免日志冗余
  if [ "$(redis-cli -h $host -p $port -a $REDIS_PASSWORD ping 2>/dev/null)" != "PONG" ]; then
    echo "節(jié)點(diǎn) $node 未就緒"
    all_ready=0
    break
  else
    echo "節(jié)點(diǎn) $node 已就緒"
  fi
done

# 9. 未就緒節(jié)點(diǎn)處理：若存在未就緒節(jié)點(diǎn)，腳本以0狀態(tài)碼退出（非錯(cuò)誤退出）
#    原因：K8s會(huì)將非0退出視為“腳本執(zhí)行失敗”并重啟Pod，此處用exit 0避免無效重啟
#    后續(xù)Pod重啟時(shí)，腳本會(huì)重新執(zhí)行檢查，直到所有節(jié)點(diǎn)就緒
if [ $all_ready -ne 1 ]; then
  echo "有節(jié)點(diǎn)未就緒，退出"
  exit 0
fi

# -------------------------- 集群狀態(tài)判斷部分 --------------------------
echo "檢查集群狀態(tài)..."
# 10. 獲取集群狀態(tài)：通過第一個(gè)節(jié)點(diǎn)的cluster info命令獲取集群狀態(tài)（cluster_state）
#    原因：Redis Cluster中所有節(jié)點(diǎn)的集群狀態(tài)全局一致，無需遍歷所有節(jié)點(diǎn)，減少檢查開銷
#    ${NODES[0]%:*}：提取第一個(gè)節(jié)點(diǎn)的主機(jī)名（刪除字符串最后一個(gè)“:”及后面內(nèi)容）
#    ${NODES[0]#*:}：提取第一個(gè)節(jié)點(diǎn)的端口（刪除字符串第一個(gè)“:”及前面內(nèi)容）
#    tr -d '[:space:]'：去除結(jié)果中的空格，避免空格導(dǎo)致狀態(tài)判斷失效
cluster_state=$(redis-cli -h ${NODES[0]%:*} -p ${NODES[0]#*:} -a $REDIS_PASSWORD cluster info 2>/dev/null | grep "cluster_state" | cut -d: -f2 | tr -d '[:space:]')

# 11. 已初始化集群處理：若集群狀態(tài)為“ok”（已完成初始化），腳本退出
#    原因：K8s Pod可能因重啟（如配置更新、節(jié)點(diǎn)故障恢復(fù)）重新執(zhí)行腳本
#    重復(fù)執(zhí)行--cluster create會(huì)導(dǎo)致集群元數(shù)據(jù)混亂（如節(jié)點(diǎn)角色沖突），需避免
if [ "$cluster_state" = "ok" ]; then
  echo "集群已初始化，狀態(tài)正常"
  exit 0
fi

# -------------------------- 集群初始化部分 --------------------------
echo "開始初始化 Redis 集群..."
# 12. 集群創(chuàng)建命令：核心指令，完成3主3從集群的自動(dòng)初始化
#    -a $REDIS_PASSWORD：攜帶密碼，確保初始化過程中認(rèn)證通過
#    --cluster create：觸發(fā)Redis Cluster創(chuàng)建流程
#    --cluster-replicas 1：指定“1主1從”架構(gòu)，6個(gè)節(jié)點(diǎn)自動(dòng)分配為3主3從（按節(jié)點(diǎn)順序：0/1/2為主，3/4/5為從）
#    優(yōu)勢(shì)：無需手動(dòng)指定主從關(guān)系，適配K8s自動(dòng)化部署場(chǎng)景，減少運(yùn)維操作
redis-cli -a $REDIS_PASSWORD \
  --cluster create \
  --cluster-replicas 1 \
  ${NODES[@]} 

echo "集群初始化完成"

kind: Service
apiVersion: v1
metadata:
  name: redis-cluster
spec:
  ports:
    - name: redis
      protocol: TCP
      port: 6379
      targetPort: 6379
    - name: election
      protocol: TCP
      port: 16379
      targetPort: 16379
  selector:
    app: redis-cluster
  clusterIP: None
  type: ClusterIP

kind: StatefulSet
apiVersion: apps/v1
metadata:
  name: redis-cluster
  labels:
    app: redis-cluster
spec:
  replicas: 6
  selector:
    matchLabels:
      app: redis-cluster
  template:
    metadata:
      labels:
        app: redis-cluster
    spec:
      volumes:
        - name: redis-conf
          configMap:
            name: redis-cluster-cm
            items:
              - key: redis-cluster.conf
                path: redis-cluster.conf
            defaultMode: 420
        - name: redis-init
          configMap:
            name: redis-cluster-cm
            items:
              - key: init-redis-cluster.sh
                path: init-redis-cluster.sh
            defaultMode: 420
      containers:
        - name: redis-cluster
          image: 'redis:7.2.6-amd64'
          args:
            - /etc/redis/redis-cluster.conf
            - '--cluster-announce-ip "$(POD_NAME).$(POD_SERVICE_NAME)"'
          ports:
            - name: redis
              containerPort: 6379
              protocol: TCP
            - name: election
              containerPort: 16379
              protocol: TCP
          env:
            - name: TZ
              value: Asia/Shanghai
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.name
            - name: POD_SERVICE_NAME
              value: redis-cluster
          resources:
            limits:
              cpu: '1'
              memory: 2Gi
            requests:
              cpu: 500m
              memory: 1Gi
          volumeMounts:
            - name: redis-conf
              mountPath: /etc/redis
            - name: redis-init
              mountPath: /redis-init
            - name: redis-cluster-data
              mountPath: /data
          livenessProbe:
            tcpSocket:
              port: redis
            initialDelaySeconds: 16
            timeoutSeconds: 1
            periodSeconds: 3
            successThreshold: 1
            failureThreshold: 2
          readinessProbe:
            tcpSocket:
              port: redis
            initialDelaySeconds: 16
            timeoutSeconds: 1
            periodSeconds: 3
            successThreshold: 1
            failureThreshold: 2
          imagePullPolicy: IfNotPresent
      restartPolicy: Always
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
            - weight: 100
              podAffinityTerm:
                labelSelector:
                  matchExpressions:
                    - key: app
                      operator: In
                      values:
                        - redis-cluster
                topologyKey: kubernetes.io/hostname
      schedulerName: default-scheduler
  volumeClaimTemplates:
    - kind: PersistentVolumeClaim
      apiVersion: v1
      metadata:
        name: redis-cluster-data
      spec:
        accessModes:
          - ReadWriteMany
        resources:
          requests:
            storage: 10Gi
        storageClassName: nfs
        volumeMode: Filesystem
  serviceName: redis-cluster

affinity:
  podAntiAffinity:
    preferredDuringSchedulingIgnoredDuringExecution:  # 優(yōu)先調(diào)度策略（非強(qiáng)制）
      - weight: 100  # 權(quán)重100（最高優(yōu)先級(jí)）
        podAffinityTerm:
          labelSelector:  # 匹配標(biāo)簽為 app=redis-cluster 的 Pod
            matchExpressions:
              - key: app
                operator: In
                values: [redis-cluster]
          topologyKey: kubernetes.io/hostname  # 按主機(jī)（Node）劃分拓?fù)溆?/pre>

kubectl apply -f redis-cluster/*.yaml

# exec 進(jìn)入容器
kubectl exec -it redis-cluster-0 -- /bin/bash

# 初始化集群
cd /redis-init
bash init-redis-cluster.sh

查看集群狀態(tài)、測(cè)試數(shù)據(jù)讀寫，進(jìn)入任意一個(gè)pod執(zhí)行:

```bash
# kubectl -n test exec -it redis-cluster-sts-0 -- bash
root@redis-cluster-sts-0:/data# redis-cli -a ClusterRedis#20251112 -c  
  
Warning: Using a password with '-a' or '-u' option on the command line interface may not be safe.
?
# CLUSTER NODES 查看集群節(jié)點(diǎn)，正常
127.0.0.1:6379> CLUSTER NODES

?
# CLUSTER INFO 查看集群信息：cluster_state:ok表示集群正常
127.0.0.1:6379> CLUSTER INFO

# 寫入，讀取key， 正常
127.0.0.1:6379> set boo foo
127.0.0.1:6379> get boo
"foo"