材料之kube-dns.yaml

---
#ConfigMap是我们见到的一个新类型，顾名思义是做配置管理的，这里用作kube-dns配置存储
apiVersion: v1
kind: ConfigMap
metadata:name: kube-dnsnamespace: kube-systemlabels:addonmanager.kubernetes.io/mode: EnsureExists---
#认证授权使用，这里未用到
apiVersion: v1
kind: ServiceAccount
metadata:name: kube-dnsnamespace: kube-systemlabels:addonmanager.kubernetes.io/mode: Reconcile---
#dns服务
apiVersion: v1
kind: Service
metadata:name: kube-dnsnamespace: kube-systemlabels:k8s-app: kube-dnsaddonmanager.kubernetes.io/mode: Reconcilekubernetes.io/name: "KubeDNS"
spec:selector:#选择器，一个服务包含了哪些podsk8s-app: kube-dns#服务的clusterip，需要跟kubelet保持一致clusterIP: 10.68.0.2ports:- name: dnsport: 53protocol: UDP- name: dns-tcpport: 53protocol: TCP---
#具体的pod定义，包含了三个容器
apiVersion: apps/v1
kind: Deployment
metadata:name: kube-dnsnamespace: kube-systemlabels:k8s-app: kube-dnsaddonmanager.kubernetes.io/mode: Reconcile
spec:strategy:rollingUpdate:maxSurge: 10%maxUnavailable: 0selector:matchLabels:k8s-app: kube-dnstemplate:metadata:labels:k8s-app: kube-dnsannotations:scheduler.alpha.kubernetes.io/critical-pod: ''spec:tolerations:- key: "CriticalAddonsOnly"operator: "Exists"volumes:- name: kube-dns-configconfigMap:name: kube-dnsoptional: truecontainers:#实现dns解析功能- name: kubednsimage: registry.cn-hangzhou.aliyuncs.com/imooc/k8s-dns-kube-dns-amd64:1.14.5resources:# TODO: Set memory limits when we've profiled the container for large# clusters, then set request = limit to keep this container in# guaranteed class. Currently, this container falls into the# "burstable" category so the kubelet doesn't backoff from restarting it.limits:memory: 170Mirequests:cpu: 100mmemory: 70MilivenessProbe:httpGet:path: /healthcheck/kubednsport: 10054scheme: HTTPinitialDelaySeconds: 60timeoutSeconds: 5successThreshold: 1failureThreshold: 5readinessProbe:httpGet:path: /readinessport: 8081scheme: HTTP# we poll on pod startup for the Kubernetes master service and# only setup the /readiness HTTP server once that's available.initialDelaySeconds: 3timeoutSeconds: 5args:- --domain=cluster.local.- --dns-port=10053- --config-dir=/kube-dns-config#访问kube-apiserver的地址- --kube-master-url=http://{{MASTER_IP}}:8080- --v=2env:- name: PROMETHEUS_PORTvalue: "10055"ports:- containerPort: 10053name: dns-localprotocol: UDP- containerPort: 10053name: dns-tcp-localprotocol: TCP- containerPort: 10055name: metricsprotocol: TCPvolumeMounts:- name: kube-dns-configmountPath: /kube-dns-config#dnsmasq类似一个dns缓存，用于提高访问效率- name: dnsmasqimage: registry.cn-hangzhou.aliyuncs.com/imooc/k8s-dns-dnsmasq-nanny-amd64:1.14.5livenessProbe:httpGet:path: /healthcheck/dnsmasqport: 10054scheme: HTTPinitialDelaySeconds: 60timeoutSeconds: 5successThreshold: 1failureThreshold: 5args:- -v=2- -logtostderr- -configDir=/etc/k8s/dns/dnsmasq-nanny- -restartDnsmasq=true- --- -k- --cache-size=1000- --log-facility=-- --server=/cluster.local./127.0.0.1#10053- --server=/in-addr.arpa/127.0.0.1#10053- --server=/ip6.arpa/127.0.0.1#10053ports:- containerPort: 53name: dnsprotocol: UDP- containerPort: 53name: dns-tcpprotocol: TCP# see: https://github.com/kubernetes/kubernetes/issues/29055 for detailsresources:requests:cpu: 150mmemory: 20MivolumeMounts:- name: kube-dns-configmountPath: /etc/k8s/dns/dnsmasq-nanny#sidecar是一个监控功能，负责监控另外两个容器的运行- name: sidecarimage: registry.cn-hangzhou.aliyuncs.com/imooc/k8s-dns-sidecar-amd64:1.14.5livenessProbe:httpGet:path: /metricsport: 10054scheme: HTTPinitialDelaySeconds: 60timeoutSeconds: 5successThreshold: 1failureThreshold: 5args:- --v=2- --logtostderr- --probe=kubedns,127.0.0.1:10053,kubernetes.default.svc.cluster.local.,5,A- --probe=dnsmasq,127.0.0.1:53,kubernetes.default.svc.cluster.local.,5,Aports:- containerPort: 10054name: metricsprotocol: TCPresources:requests:memory: 20Micpu: 10mdnsPolicy: Default  # Don't use cluster DNS.serviceAccountName: kube-dns

材料之kube-dns.yaml相关推荐

kubernetes1.8.4 安装指南 -- 8. 安装Kube DNS
在master节点的/etc/kubernetes/addons/下面建立文件kube-dns.yml apiVersion: v1 kind: ServiceAccount metadata:nam ...
dial tcp 10.96.0.1:443: getsockopt: no route to host --- kubernetes（k8s）DNS 服务反复重启
kubernetes(k8s)DNS 服务反复重启解决: k8s.io/dns/pkg/dns/dns.go:150: Failed to list *v1.Service: Get https:// ...
Istio 中的 Sidecar 注入及透明流量劫持过程详解
图片来源:上海五角场 by Jimmy Song 本文基于 Istio 1.5.1 版本,将为大家介绍以下内容: 什么是 sidecar 模式和它的优势在哪里. Istio 中是如何做 sidecar ...
vm安装net失败_使用minikube安装kubernetes和dashboard
minikube可以运行一个本地单节点的kubernetes集群,可以非常容易地在本地部署kubernetes.虽然只支持单节点的kubernetes集群,但是能支持很多kubernetes特性,包括 ...
kubernetes_建立Kubernetes概念验证的技巧
kubernetes 将新技术引入雇主生态系统的最佳方法是什么? 您可能首先要安排会议. 但是,如果您被问到有什么好处,是否可以省钱,以及如何使开发人员更高效呢? 答案对您来说可能显而易见,但是您需要 ...
Kubernetes v1.10.x HA 全手动安装教程(TL;DR)
转自 https://www.kubernetes.org.cn/3814.html 本篇延续过往手动安装方式来部署 Kubernetes v1.10.x 版本的 High Availability ...
二进制部署Kubernetes v1.13.4 HA可选
本次采用二进制文件方式部署,本文过程写成了更详细的ansible部署方案 https://github.com/zhangguanzhang/Kubernetes-ansible 和之前的步骤差不多都 ...
Kubernetes 概述和搭建 (多节点)
一.Kubernetes 整体概述和架构 Kubernetes 是什么 Kubernetes 是一个轻便的和可扩展的开源平台,用于管理容器化应用和服务.通过 Kubernetes 能够进行应用的自动化 ...
Kubernetes基础1
1.kubernetes部署 1.1 环境介绍系统版本 Ubuntu 18.04.4 LTS 角色主机名 IP 备注 k8s-master1 kubeadm-master1.haostack.co ...
Kuerbernetes 1.11 二进制安装
Kuerbernetes 1.11 二进制安装标签(空格分隔): k8s 2019年06月13日本文截选 https://k.i4t.com 更多文章请持续关注https://i4t.com 什么 ...

材料之kube-dns.yaml

材料之kube-dns.yaml相关推荐

最新文章

热门文章