mkdir -p /etc/containerd
containerd config default > /etc/containerd/config.toml
# 替换配置文件
sed -i "s#k8s.gcr.io#registry.cn-hangzhou.aliyuncs.com/google_containers#g"  /etc/containerd/config.toml
sed -i '/containerd.runtimes.runc.options/a\ \ \ \ \ \ \ \ \ \ \ \ SystemdCgroup = true' /etc/containerd/config.toml
sed -i "s#https://registry-1.docker.io#https://registry.cn-hangzhou.aliyuncs.com#g"  /etc/containerd/config.toml


然后再为镜像仓库配置一个加速器，需要在 cri 配置块下面的 registry 配置块下面进行配置 registry.mirrors：
[plugins."io.containerd.grpc.v1.cri"]
  ...
  # sandbox_image = "k8s.gcr.io/pause:3.5"
  sandbox_image = "registry.aliyuncs.com/k8sxio/pause:3.5"
  ...
  [plugins."io.containerd.grpc.v1.cri".registry]
    [plugins."io.containerd.grpc.v1.cri".registry.mirrors]
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."docker.io"]
        endpoint = ["https://bqr1dr1n.mirror.aliyuncs.com"]
      [plugins."io.containerd.grpc.v1.cri".registry.mirrors."k8s.gcr.io"]
        endpoint = ["https://registry.aliyuncs.com/k8sxio"]

containerd registry mirror
https://github.com/containerd/containerd/blob/main/docs/cri/config.md#registry-configuration
https://github.com/containerd/containerd/blob/main/docs/cri/registry.md



# 拉取镜像
crictl pull registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.2
# 修改tag
ctr -n=k8s.io i tag  registry.cn-hangzhou.aliyuncs.com/google_containers/pause:3.2 k8s.gcr.io/pause:3.2
大部分的镜像都可以直接使用 registry.cn-hangzhou.aliyuncs.com/google_containers 来替换 k8s.gcr.io获取到，如果不行的话，可以试试用下面的去替换：
k8s.gcr.io ---> lank8s.cn
gcr.io --> gcr.lank8s.cn

1. 控制器：ReplicaSet/Deployment/StatefulSet/DaemonSet/Job/HPA
2. 配置管理：configmap、secret
3. 安全：RBAC
4. 网络：网络插件、策略、Service、Ingress（nginx controller、traefik、kong等）、ServiceMesh、直接与Pod通信
5. 调度：亲和力、特殊硬件特殊调度
6. 存储：ceph、NFS、glusterFS、iscsi等
7. 状态应用：数据库、消息中间件等
8. 包管理：helm
9. 运维：监控、日志、DevOps（jenkins、gitlab、harbor、tekton）
10. 本地与集群的互联
11. 多环境：测试、预生产、生产等

ref：
https://www.qikqiak.com/k8strain/

多可用区
faas and scale out