1 # vi /etc/systemd/system/kubelet.service 2 …… 3 --config=/etc/kubernetes/kubelet-config.yaml \ 4 …… 5 # vi /etc/kubernetes/kubelet-config.yaml 6 …… 7 clusterdomain: "cluster.local" 8 clusterdns: 9 - "10.254.0.2" 10 ……
1 [root@k8smaster01 ~]# vi corednsaccout.yaml 2 # __machine_generated_warning__ 3 4 apiversion: v1 5 kind: serviceaccount 6 metadata: 7 name: coredns 8 namespace: kube-system 9 labels: 10 kubernetes.io/cluster-service: "true" 11 addonmanager.kubernetes.io/mode: reconcile 12 --- 13 apiversion: rbac.authorization.k8s.io/v1 14 kind: clusterrole 15 metadata: 16 labels: 17 kubernetes.io/bootstrapping: rbac-defaults 18 addonmanager.kubernetes.io/mode: reconcile 19 name: system:coredns 20 rules: 21 - apigroups: 22 - "" 23 resources: 24 - endpoints 25 - services 26 - pods 27 - namespaces 28 verbs: 29 - list 30 - watch 31 - apigroups: 32 - "" 33 resources: 34 - nodes 35 verbs: 36 - get 37 --- 38 apiversion: rbac.authorization.k8s.io/v1 39 kind: clusterrolebinding 40 metadata: 41 annotations: 42 rbac.authorization.kubernetes.io/autoupdate: "true" 43 labels: 44 kubernetes.io/bootstrapping: rbac-defaults 45 addonmanager.kubernetes.io/mode: ensureexists 46 name: system:coredns 47 roleref: 48 apigroup: rbac.authorization.k8s.io 49 kind: clusterrole 50 name: system:coredns 51 subjects: 52 - kind: serviceaccount 53 name: coredns 54 namespace: kube-system 55 56 [root@k8smaster01 ~]# kubectl create -f corednsaccout.yaml
1 [root@k8smaster01 ~]# vi corednsconfigmap.yaml 2 apiversion: v1 3 kind: configmap 4 metadata: 5 name: coredns 6 namespace: kube-system 7 labels: 8 addonmanager.kubernetes.io/mode: ensureexists 9 data: 10 corefile: | 11 .:53 { 12 errors 13 health 14 kubernetes cluster.local in-addr.arpa ip6.arpa { 15 pods insecure 16 upstream 17 fallthrough in-addr.arpa ip6.arpa 18 } 19 prometheus :9153 20 forward . /etc/resolv.conf 21 cache 30 22 loop 23 reload 24 loadbalance 25 } 26 27 [root@k8smaster01 ~]# kubectl create -f corednsconfigmap.yaml
1 [root@k8smaster01 ~]# vi corednsdeploy.yaml 2 apiversion: apps/v1 3 kind: deployment 4 metadata: 5 name: coredns 6 namespace: kube-system 7 labels: 8 k8s-app: kube-dns 9 kubernetes.io/cluster-service: "true" 10 addonmanager.kubernetes.io/mode: reconcile 11 kubernetes.io/name: "coredns" 12 spec: 13 # replicas: not specified here: 14 # 1. in order to make addon manager do not reconcile this replicas parameter. 15 # 2. default is 1. 16 # 3. will be tuned in real time if dns horizontal auto-scaling is turned on. 17 strategy: 18 type: rollingupdate 19 rollingupdate: 20 maxunavailable: 1 21 selector: 22 matchlabels: 23 k8s-app: kube-dns 24 template: 25 metadata: 26 labels: 27 k8s-app: kube-dns 28 annotations: 29 seccomp.security.alpha.kubernetes.io/pod: 'docker/default' 30 spec: 31 priorityclassname: system-cluster-critical 32 serviceaccountname: coredns 33 tolerations: 34 - key: "criticaladdonsonly" 35 operator: "exists" 36 nodeselector: 37 beta.kubernetes.io/os: linux 38 containers: 39 - name: coredns 40 image: registry.cn-hangzhou.aliyuncs.com/google_containers/coredns:1.3.1 41 imagepullpolicy: ifnotpresent 42 resources: 43 limits: 44 memory: 170mi 45 requests: 46 cpu: 100m 47 memory: 70mi 48 args: [ "-conf", "/etc/coredns/corefile" ] 49 volumemounts: 50 - name: config-volume 51 mountpath: /etc/coredns 52 readonly: true 53 ports: 54 - containerport: 53 55 name: dns 56 protocol: udp 57 - containerport: 53 58 name: dns-tcp 59 protocol: tcp 60 - containerport: 9153 61 name: metrics 62 protocol: tcp 63 livenessprobe: 64 httpget: 65 path: /health 66 port: 8080 67 scheme: http 68 initialdelayseconds: 60 69 timeoutseconds: 5 70 successthreshold: 1 71 failurethreshold: 5 72 readinessprobe: 73 httpget: 74 path: /health 75 port: 8080 76 scheme: http 77 securitycontext: 78 allowprivilegeescalation: false 79 capabilities: 80 add: 81 - net_bind_service 82 drop: 83 - all 84 readonlyrootfilesystem: true 85 dnspolicy: default 86 volumes: 87 - name: config-volume 88 configmap: 89 name: coredns 90 items: 91 - key: corefile 92 path: corefile 93 94 [root@k8smaster01 ~]# kubectl create -f corednsdeploy.yaml
1 [root@k8smaster01 ~]# vi corednssvc.yaml 2 apiversion: v1 3 kind: service 4 metadata: 5 name: kube-dns 6 namespace: kube-system 7 annotations: 8 prometheus.io/port: "9153" 9 prometheus.io/scrape: "true" 10 labels: 11 k8s-app: kube-dns 12 kubernetes.io/cluster-service: "true" 13 addonmanager.kubernetes.io/mode: reconcile 14 kubernetes.io/name: "coredns" 15 spec: 16 selector: 17 k8s-app: kube-dns 18 clusterip: 10.254.0.2 19 ports: 20 - name: dns 21 port: 53 22 protocol: udp 23 - name: dns-tcp 24 port: 53 25 protocol: tcp 26 - name: metrics 27 port: 9153 28 protocol: tcp 29 30 [root@k8smaster01 ~]# kubectl create -f corednssvc.yaml
1 [root@k8smaster01 ~]# kubectl get deployments --namespace=kube-system 2 name ready up-to-date available age 3 coredns 1/1 1 1 14s 4 [root@k8smaster01 ~]# kubectl get pod --namespace=kube-system 5 name ready status restarts age 6 coredns-5b46b98d57-cknrr 1/1 running 0 34s 7 [root@k8smaster01 ~]# kubectl get svc --namespace=kube-system 8 name type cluster-ip external-ip port(s) age 9 kube-dns clusterip 10.254.0.2 <none> 53/udp,53/tcp,9153/tcp 47s
1 [root@k8smaster01 ~]# vi busybox.yaml 2 apiversion: v1 3 kind: pod 4 metadata: 5 name: busybox 6 namespace: default 7 spec: 8 containers: 9 - name: busybox 10 image: gcr.azk8s.cn/google_containers/busybox 11 command: 12 - sleep 13 - "3600" 14 15 [root@k8smaster01 ~]# kubectl exec -ti busybox -- nslookup webapp #测试解析 16 server: 10.254.0.2 17 address 1: 10.254.0.2 kube-dns.kube-system.svc.cluster.local 18 19 name: webapp 20 address 1: 10.254.156.234 webapp.default.svc.cluster.local
1 [root@k8smaster01 ~]# kubectl exec -ti busybox -- nslookup kube-dns.kube-system #补充kube-system的namespace 2 server: 10.254.0.2 3 address 1: 10.254.0.2 kube-dns.kube-system.svc.cluster.local 4 5 name: kube-dns.kube-system 6 address 1: 10.254.0.2 kube-dns.kube-system.svc.cluster.local
1 [root@k8smaster01 ~]# vi corednsconfigmap.yaml 2 apiversion: v1 3 kind: configmap 4 metadata: 5 name: coredns 6 namespace: kube-system 7 labels: 8 addonmanager.kubernetes.io/mode: ensureexists 9 data: 10 corefile: | 11 .:53 { 12 errors 13 health 14 kubernetes cluster.local in-addr.arpa ip6.arpa { 15 pods insecure 16 upstream 17 fallthrough in-addr.arpa ip6.arpa 18 } 19 prometheus :9153 20 forward . /etc/resolv.conf 21 cache 30 22 loop 23 reload 24 loadbalance 25 }
1 { 2 etcd com { 3 path /skydns 4 endpoint http://192.168.18.3:2379 5 upstream /etc/resolv.conf 6 } 7 cache 160 com 8 loadbalance 9 proxy . /etc/resolv.conf 10 11 } 12 [root@k8smaster01 ~]# etcdctl put /skydns/com/mycompany '{"host":"10.1.1.1","ttl":"60"}' #测试插入 13 [root@k8smaster01 ~]# nslookpu mycompany.com
1 [root@k8smaster01 study]# vi mywebapp.yaml 2 apiversion: v1 3 kind: pod 4 metadata: 5 name: webapp 6 spec: 7 containers: 8 - name: webapp 9 image: tomcat 10 dnspolicy: default 11 ……
1 [root@k8smaster01 study]# vi mywebapp.yaml 2 apiversion: v1 3 kind: pod 4 metadata: 5 namespace: default 6 name: dns-example 7 spec: 8 containers: 9 - name: test 10 image: nginx 11 dnspolicy: "none" 12 dnsconfig: 13 nameservers: 14 - 223.5.5.5 15 searches: 16 - ns1.svc.cluster.local 17 - my.dns.search.suffix 18 options: 19 - name: ndots 20 value: "2" 21 - name: edns0
1 [root@k8smaster01 study]# kubectl create -f mywebapp.yaml 2 [root@k8smaster01 study]# kubectl exec -ti dns-example -- cat /etc/resolv.conf #确认查看 3 nameserver 223.5.5.5 4 search ns1.svc.cluster.local my.dns.search.suffix 5 options ndots:2 edns0
如对本文有疑问, 点击进行留言回复!!
linux下文本编辑器vim的使用方法(复制、粘贴、替换、行号、撤销、多文件操作)
网友评论