k8s-DNS

k8s-DNS

Ansible部署K8S参考:​​pull gcr.io/google-containers/coredns:1.2.6docker tag gcr.io/google-containers/coredns:1.2.6 harbor.gesila.com/k8s/coredns:1.2.6docker push harbor.gesila.com/k8s/coredns:1.2.6

1.1.dns测试

vim coredns.yamlkubectl apply -f coredns.yamlkubectl exec busybox nslookup kubernetes---------------------------------------------------------------------Server: 10.20.254.254Address 1: 10.20.254.254 kube-dns.kube-system.svc.linux36.localName: kubernetesAddress 1: 10.20.0.1 kubernetes.default.svc.linux36.localkubectl exec busybox nslookup kubernetes.default.svc.linux36.local---------------------------------------------------------------------Server: 10.20.254.254Address 1: 10.20.254.254 kube-dns.kube-system.svc.linux36.localName: kubernetes.default.svc.linux36.localAddress 1: 10.20.0.1 kubernetes.default.svc.linux36.local

2.部署:kube-dns

2.1.busybox

2.1.1.准备目录及文件

root@k8s-master:~# mkdir /etc/ansible/manifests/dnsroot@k8s-master:~# cd /etc/ansible/manifests/dnsroot@k8s-master:/etc/ansible/manifests/dns# mkdir kube-dns corednsroot@k8s-master:/etc/ansible/manifests/dns# cd kube-dns/root@k8s-master:/etc/ansible/manifests/dns/kube-dns# rz -Erz waiting to receive.root@k8s-master:/etc/ansible/manifests/dns/kube-dns# lsbusybox-online.tar.gz busybox.yaml kube-dns.yaml

2.1.2.导入镜像上传到harbor

root@k8s-master:/etc/ansible/manifests/dns/kube-dns# docker load -i busybox-online.tar.gzdocker tag 747e1d7f6665 harbor.gesila.com/k8s/busybox:latestdocker push harbor.gesila.com/k8s/busybox:latest

2.1.3.修改镜像源

root@k8s-master:/etc/ansible/manifests/dns/kube-dns# vim busybox.yamlapiVersion: v1kind: Podmetadata: name: busybox namespace: default #default namespace的DNSspec: containers: - image: harbor.gesila.com/k8s/busybox:latest command: - sleep - "3600" imagePullPolicy: Always name: busybox restartPolicy: Always

2.1.4.创建服务

root@k8s-master:/etc/ansible/manifests/dns/kube-dns# kubectl apply -f busybox.yamlpod/busybox createdroot@k8s-master:/etc/ansible/manifests/dns/kube-dns# kubectl get podsNAME READY STATUS RESTARTS AGEbusybox 1/1 Running 0 67m

2.2.kube-dns

2.2.1.镜像导入及上传到harbor仓库

docker load -i k8s-dns-kube-dns-amd64_1.14.13.tar.gz && \docker load -i k8s-dns-dnsmasq-nanny-amd64_1.14.13.tar.gz && \docker load -i k8s-dns-sidecar-amd64_1.14.13.tar.gzdocker tag 82f954458b31 harbor.gesila.com/k8s/kube-dns-amd64:1.14.13 && \docker tag 7b15476a7228 harbor.gesila.com/k8s/dnsmasq-nanny-amd64:1.14.13 && \docker tag 333fb0833870 harbor.gesila.com/k8s/sidecar-amd64:1.14.13docker push harbor.gesila.com/k8s/kube-dns-amd64:1.14.13 && \docker push harbor.gesila.com/k8s/dnsmasq-nanny-amd64:1.14.13 && \docker push harbor.gesila.com/k8s/sidecar-amd64:1.14.13

2.2.2.修改配置文件

root@master:/etc/ansible/manifests/dns/kube-dns# vim kube-dns.yaml ----------------------------------------------------------------------------------------clusterIP: 10.20.254.254 #与host文件中CLUSTER_DNS_SVC_IP 一致- --domain:linux36.local. #与host文件中CLUSTER_DNS_DOMAIN 一致- --server=/linux36.local/127.0.0.1#10053 #域名由哪个服务器的端口处理- --server=/magedu.net/172.20.100.23#53 #解析自己的域名- --probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.linux36.local,5,SRV- --probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.linux36.local,5,SRV- name: kubedns images: harbor.gesila.com/k8s/kube-dns-amd64:1.14.13- name: dnsmasq images: harbor.gesila.com/k8s/dnsmasq-nanny-amd64:1.14.13- name: sidecar images: harbor.gesila.com/k8s/sidecar-amd64:1.14.13

2.2.3.创建服务

root@k8s-master:/etc/ansible/manifests/dns/kube-dns# kubectl create -f kube-dns.yamlservice/kube-dns createdserviceaccount/kube-dns createdconfigmap/kube-dns createddeployment.extensions/kube-dns createdroot@k8s-master:/etc/ansible/manifests/dns/kube-dns# kubectl get pods -n kube-systemNAME READY STATUS RESTARTS AGEcalico-kube-controllers-64dfd5bf4c-q94ls 1/1 Running 0 153mcalico-node-9ccdk 2/2 Running 2 22hcalico-node-k297m 2/2 Running 4 22hcalico-node-w6m6p 2/2 Running 10 22hkube-dns-5744cc9dff-rxgjk 3/3 Running 0 30skubernetes-dashboard-7b5f5b777c-s7djw 1/1 Running 0 153m

2.2.3.1.kube-dns.yaml

# Copyright 2016 The Kubernetes Authors.## Licensed under the Apache License, Version 2.0 (the "License");# you may not use this file except in compliance with the License.# You may obtain a copy of the License at## Unless required by applicable law or agreed to in writing, software# distributed under the License is distributed on an "AS IS" BASIS,# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.# See the License for the specific language governing permissions and# limitations under the License.# Should keep target in cluster/addons/dns-horizontal-autoscaler/dns-horizontal-autoscaler.yaml# in sync with this file.# __MACHINE_GENERATED_WARNING__apiVersion: v1kind: Servicemetadata: name: kube-dns namespace: kube-system labels: k8s-app: kube-dns kubernetes.io/cluster-service: "true" addonmanager.kubernetes.io/mode: Reconcile kubernetes.io/name: "KubeDNS"spec: selector: k8s-app: kube-dns clusterIP: 10.20.254.254 ports: - name: dns port: 53 protocol: UDP - name: dns-tcp port: 53 protocol: TCP---apiVersion: v1kind: ServiceAccountmetadata: name: kube-dns namespace: kube-system labels: kubernetes.io/cluster-service: "true" addonmanager.kubernetes.io/mode: Reconcile---apiVersion: v1kind: ConfigMapmetadata: name: kube-dns namespace: kube-system labels: addonmanager.kubernetes.io/mode: EnsureExists---apiVersion: extensions/v1beta1kind: Deploymentmetadata: name: kube-dns namespace: kube-system labels: k8s-app: kube-dns kubernetes.io/cluster-service: "true" addonmanager.kubernetes.io/mode: Reconcilespec: # replicas: not specified here: # 1. In order to make Addon Manager do not reconcile this replicas parameter. # 2. Default is 1. # 3. Will be tuned in real time if DNS horizontal auto-scaling is turned on. strategy: rollingUpdate: maxSurge: 10% maxUnavailable: 0 selector: matchLabels: k8s-app: kube-dns template: metadata: labels: k8s-app: kube-dns annotations: scheduler.alpha.kubernetes.io/critical-pod: '' seccomp.security.alpha.kubernetes.io/pod: 'docker/default' spec: priorityClassName: system-cluster-critical securityContext: supplementalGroups: [ 65534 ] fsGroup: 65534 tolerations: - key: "CriticalAddonsOnly" operator: "Exists" volumes: - name: kube-dns-config configMap: name: kube-dns optional: true containers: - name: kubedns image: harbor.gesila.com/k8s/kube-dns-amd64:1.14.13 resources: # TODO: Set memory limits when we've profiled the container for large # clusters, then set request = limit to keep this container in # guaranteed class. Currently, this container falls into the # "burstable" category so the kubelet doesn't backoff from restarting it. limits: memory: 170Mi requests: cpu: 100m memory: 70Mi livenessProbe: path: /healthcheck/kubedns port: 10054 scheme: HTTP initialDelaySeconds: 60 timeoutSeconds: 5 successThreshold: 1 failureThreshold: 5 readinessProbe: path: /readiness port: 8081 scheme: HTTP # we poll on pod startup for the Kubernetes master service and # only setup the /readiness HTTP server once that's available. initialDelaySeconds: 3 timeoutSeconds: 5 args: - --domain=linux36.local. - --dns-port=10053 - --config-dir=/kube-dns-config - --v=2 env: - name: PROMETHEUS_PORT value: "10055" ports: - containerPort: 10053 name: dns-local protocol: UDP - containerPort: 10053 name: dns-tcp-local protocol: TCP - containerPort: 10055 name: metrics protocol: TCP volumeMounts: - name: kube-dns-config mountPath: /kube-dns-config - name: dnsmasq image: harbor.gesila.com/k8s/dnsmasq-nanny-amd64:1.14.13 livenessProbe: path: /healthcheck/dnsmasq port: 10054 scheme: HTTP initialDelaySeconds: 60 timeoutSeconds: 5 successThreshold: 1 failureThreshold: 5 args: - -v=2 - -logtostderr - -configDir=/etc/k8s/dns/dnsmasq-nanny - -restartDnsmasq=true - -- - -k - --cache-size=1000 - --no-negcache - --dns-loop-detect - --log-facility=- - --server=/magedu.net/172.20.100.23#53 - --server=/linux36.local/127.0.0.1#10053 - --server=/in-addr.arpa/127.0.0.1#10053 - --server=/ip6.arpa/127.0.0.1#10053 ports: - containerPort: 53 name: dns protocol: UDP - containerPort: 53 name: dns-tcp protocol: TCP # see: for details resources: requests: cpu: 150m memory: 20Mi volumeMounts: - name: kube-dns-config mountPath: /etc/k8s/dns/dnsmasq-nanny - name: sidecar image: harbor.gesila.com/k8s/sidecar-amd64:1.14.13 livenessProbe: path: /metrics port: 10054 scheme: HTTP initialDelaySeconds: 60 timeoutSeconds: 5 successThreshold: 1 failureThreshold: 5 args: - --v=2 - --logtostderr - --probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.linux36.local,5,SRV - --probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.linux36.local,5,SRV ports: - containerPort: 10054 name: metrics protocol: TCP resources: requests: memory: 20Mi cpu: 10m dnsPolicy: Default # Don't use cluster DNS. serviceAccountName: kube-dns

2.2.4.测试dns

root@master:/etc/ansible/manifests/dns/kube-dns# kubectl exec busybox nslookup kubernetes -------------------------------------------------------------------------Server: 10.20.254.254Address 1: 10.20.254.254 kube-dns.kube-system.svc.linux36.localName: kubernetesAddress 1: 10.20.0.1 kubernetes.default.svc.linux36.local-------------------------------------------------------------------------root@master:/etc/ansible/manifests/dns/kube-dns# kubectl exec busybox nslookup kubernetes.default.svc.linux36.localServer: 10.20.254.254Address 1: 10.20.254.254 kube-dns.kube-system.svc.linux36.localName: kubernetes.default.svc.linux36.localAddress 1: 10.20.0.1 kubernetes.default.svc.linux36.local

3.kube-dns.yaml模板文件获取

下载地址：cd kubernetes/root@master:/etc/ansible/manifests/dns/kube-dns/kubernetes# lsclient cluster docs hack LICENSES README.md server versionroot@master:/etc/ansible/manifests/dns/kube-dns/kubernetes# tree cluster/addons/dnscluster/addons/dns├── coredns│ ├── coredns.yaml.base│ ├── coredns.yaml.in│ ├── coredns.yaml.sed│ ├── Makefile│ ├── transforms2salt.sed│ └── transforms2sed.sed├── kube-dns│ ├── kube-dns.yaml.base ----基于这个模板文件修改的│ ├── kube-dns.yaml.in│ ├── kube-dns.yaml.sed│ ├── Makefile│ ├── README.md│ ├── transforms2salt.sed│ └── transforms2sed.sed├── nodelocaldns│ ├── nodelocaldns.yaml│ └── README.md└── OWNERS

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。