zoukankan      html  css  js  c++  java
  • 配置k8s dns

    DNS (domain name system),提供域名解析服务,解决了难于记忆的IP地址问题,以更人性可读可记忆可标识的方式映射对应IP地址。

    Cluster DNS扩展插件用于支持k8s集群系统中各服务之间发现与调用。

      

    组件:
      •SkyDNS 提供DNS解析服务
      •Etcd 存储DNS信息
      •Kube2sky 监听kubernetes,当有Service创建时,生成相应的记录到SkyDNS。

    1.修改所有node的配置文件:/etc/kubernetes/kubelet  kubernetes-node1,kubernetes-node2,kubernetes-node3:

    [root@kubernetes-node2 ~]# tail -n 1 /etc/kubernetes/kubelet
    KUBELET_ARGS="--cluster-dns=10.254.254.254 --cluster-domain=cluster.local"

    2.所有node节点都重新启动服务

    systemctl restart kubelet.service

     

    3.根据namespace分为不同的名称空间,将系统服务统一放到一个单独的空间:kube-system,由于默认空间只有default,我们首先要创建kube-system空间。

    [root@kubernetes-master pods]# cat kube-system.yml
    apiVersion: v1
    kind: Namespace
    metadata:
          name: kube-system

    4.在master服务器上编辑ReplicationController文件dns-rc.yml

      1 apiVersion: v1
      2 kind: ReplicationController
      3 metadata:
      4   name: kube-dns-v11
      5   namespace: kube-system
      6   labels:
      7     k8s-app: kube-dns
      8     version: v11
      9     kubernetes.io/cluster-service: "true"
     10 spec:
     11   replicas: 1
     12   selector:
     13     k8s-app: kube-dns
     14     version: v11
     15   template:
     16     metadata:
     17       labels:
     18         k8s-app: kube-dns
     19         version: v11
     20         kubernetes.io/cluster-service: "true"
     21     spec:
     22       containers:
     23       - name: etcd
     24         image: docker.gaoxiaobang.com/kubernetes/etcd-amd64:2.2.1  
     25         resources:
     26           limits:
     27             cpu: 100m
     28             memory: 500Mi
     29           requests:
     30             cpu: 100m
     31             memory: 50Mi
     32         command:
     33         - /usr/local/bin/etcd
     34         - -data-dir
     35         - /var/etcd/data
     36         - -listen-client-urls
     37         - http://127.0.0.1:2379,http://127.0.0.1:4001
     38         - -advertise-client-urls
     39         - http://127.0.0.1:2379,http://127.0.0.1:4001
     40         - -initial-cluster-token
     41         - skydns-etcd
     42         #volumeMounts:
     43         #- name: etcd-storage
     44         #  mountPath: /var/etcd/data
     45       - name: kube2sky
     46         image: docker.gaoxiaobang.com/kubernetes/kube2sky:1.14
     47         args:
     48         # command = "/kube2sky"
     49         - --domain=cluster.local
     50         - --kube-master-url=http://10.64.8.68:8080
     51         resources:
     52           limits:
     53             cpu: 100m
     54             memory: 200Mi
     55           requests:
     56             cpu: 100m
     57             memory: 50Mi
     58       - name: skydns
     59         image: docker.gaoxiaobang.com/kubernetes/skydns:2015-10-13-8c72f8c
     60         resources:
     61           limits:
     62             cpu: 100m
     63             memory: 200Mi
     64           requests:
     65             cpu: 100m
     66             memory: 50Mi
     67         args:
     68         - -machines=http://127.0.0.1:4001
     69         - -addr=0.0.0.0:53
     70         - -ns-rotate=false
     71         - -domain=cluster.local.
     72         ports:
     73         - containerPort: 53
     74           name: dns
     75           protocol: UDP
     76         - containerPort: 53
     77           name: dns-tcp
     78           protocol: TCP
     79         livenessProbe:
     80           httpGet:
     81             path: /healthz
     82             port: 8080
     83             scheme: HTTP
     84           initialDelaySeconds: 60
     85           timeoutSeconds: 5
     86           successThreshold: 1
     87           failureThreshold: 5
     88         readinessProbe:
     89           httpGet:
     90             path: /readiness
     91             port: 8080
     92             scheme: HTTP
     93           initialDelaySeconds: 30
     94           timeoutSeconds: 5
     95       - name: healthz
     96         image: docker.gaoxiaobang.com/kubernetes/exechealthz:1.0
     97         resources:
     98           limits:
     99             cpu: 10m
    100             memory: 20Mi
    101           requests:
    102             cpu: 10m
    103             memory: 20Mi
    104         args:
    105         - -cmd=nslookup kubernetes.default.svc.cluster.local localhost >/dev/null
    106         - -port=8080
    107         ports:
    108         - containerPort: 8080
    109           protocol: TCP
    110       volumes:
    111       - name: etcd-storage
    112         emptyDir: {}
    113       dnsPolicy: Default
    dns-rc.yml

    注意dns-rc.yml:修改文件中的master ip

    dns service服务yml

     1 apiVersion: v1
     2 kind: Service
     3 metadata:
     4   name: kube-dns
     5   namespace: kube-system
     6   labels:
     7     k8s-app: kube-dns
     8     kubernetes.io/cluster-service: "true"
     9     kubernetes.io/name: "KubeDNS"
    10 spec:
    11   selector:
    12     k8s-app: kube-dns
    13   clusterIP:  10.254.254.254
    14   ports:
    15   - name: dns
    16     port: 53
    17     protocol: UDP
    18   - name: dns-tcp
    19     port: 53
    20     protocol: TCP
    dns-svc.yml

    创建namespace(有就不用在创建了)

    kubectl create -f kube-system.yml

    创建ReplicationController

    [root@kubernetes-master pods]# kubectl create -f dns-rc.yml

    创建Service

    [root@kubernetes-master pods]# kubectl create -f dns-svc.yml

     查看dns-rc.yml文件中定义pod的启动状态,如下则启动成功。

    [root@kubernetes-master pods]#  kubectl get pod --namespace=kube-system

     查看dns-svc.yml文件中定义的Service的信息。

    [root@kubernetes-master pods]# kubectl get svc -l k8s-app=kube-dns --namespace=kube-system

     

    测试DNS的效果。
    部署一个busybox的Pod

     1 apiVersion: v1
     2 kind: Pod
     3 metadata:
     4   name: busybox
     5   namespace: default
     6 spec:
     7   containers:
     8   - image: busybox
     9     command:
    10       - sleep
    11       - "3600"
    12     imagePullPolicy: IfNotPresent
    13     name: busybox
    14   restartPolicy: Always
    busybox.yml

    验证kubernetes服务的地址解析,出现如下所示则证明DNS解析正常。

  • 相关阅读:
    Freemaker:操作集合
    win10:在关闭防火墙下如何屏蔽特定端口
    win10:家庭版开启组策略
    oracle:10g下载地址(转载)
    mybatis:延迟加载时不要在get/set方法上面添加final关键字(原创)
    mybatis:在springboot中的配置
    mybatis:访问静态变量或方法
    maven:手动安装JAR到本地仓库
    datatables日常使用集合
    python 装饰器
  • 原文地址:https://www.cnblogs.com/menkeyi/p/7120292.html
Copyright © 2011-2022 走看看