echo-b-host-67446447f7-chvsp 1/1 Running 0 4m50s host-to-b-multi-node-clusterip-78f9869d75-l8cf8 1/1 Running 0 4m50s host-to-b-multi-node-headless-798949bd5f-vvfff pod-to-b-intra-node-845f955cdc-5nfrt 1/1 Running 0 4m49s pod-to-b-multi-node-clusterip-666594b445-bsn4j 1/1 Running 0 4m49s pod-to-b-multi-node-headless-746f84dff5-prk4w echo-b-host-67446447f7-chvsp 1/1 Running 0 4m50s host-to-b-multi-node-clusterip-78f9869d75-l8cf8 1/1 Running 0 4m50s host-to-b-multi-node-headless-798949bd5f-vvfff

echo-b-host-6b7fc94b7c-xtsff 1/1 Running 0 66s host-to-b-multi-node-clusterip-85476cd779-bpg4b 1/1 Running 0 66s host-to-b-multi-node-headless-dc6c44cb5-8jdz8 pod-to-b-intra-node-nodeport-9b487cf89-6ptrt 1/1 Running 0 65s pod-to-b-multi-node-clusterip-7db5dfdcf7-jkjpw 1/1 Running 0 66s pod-to-b-multi-node-headless-7d44b85d69-mtscc echo-b-host-6b7fc94b7c-xtsff 1/1 Running 0 66s host-to-b-multi-node-clusterip-85476cd779-bpg4b 1/1 Running 0 66s host-to-b-multi-node-headless-dc6c44cb5-8jdz8

echo-b-host-6b7fc94b7c-xtsff 1/1 Running 0 66s host-to-b-multi-node-clusterip-85476cd779-bpg4b 1/1 Running 0 66s host-to-b-multi-node-headless-dc6c44cb5-8jdz8 pod-to-b-intra-node-nodeport-9b487cf89-6ptrt 1/1 Running 0 65s pod-to-b-multi-node-clusterip-7db5dfdcf7-jkjpw 1/1 Running 0 66s pod-to-b-multi-node-headless-7d44b85d69-mtscc echo-b-host-6b7fc94b7c-xtsff 1/1 Running 0 66s host-to-b-multi-node-clusterip-85476cd779-bpg4b 1/1 Running 0 66s host-to-b-multi-node-headless-dc6c44cb5-8jdz8

echo-b-host-f86bd784d-wnh4v 1/1 Running 0 68s host-to-b-multi-node-clusterip-585db65b4d-x74nz 1/1 Running 0 68s host-to-b-multi-node-headless-77c64bc7d8-kgf8p pod-to-b-intra-node-nodeport-8484fb6d89-bwj8q 1/1 Running 0 68s pod-to-b-multi-node-clusterip-f7655dbc8-h5bwk 1/1 Running 0 68s pod-to-b-multi-node-headless-5fd98b9648-5bjj8 echo-b-host-f86bd784d-wnh4v 1/1 Running 0 68s host-to-b-multi-node-clusterip-585db65b4d-x74nz 1/1 Running 0 68s host-to-b-multi-node-headless-77c64bc7d8-kgf8p

Watch services renew RPC DNS b.svc -> 10.0.3.100 1. 在客户端代码中， 请求发送给”b.svc” 2.DNS解析”b.svc”到 clusterIP 10.0.3.100 3. 流量劫持到 sidecar1 Service Mesh演进路线 3 2 实现平滑迁移的关键 3 4 DNS寻址方案的后续规划 5 总结 DNS寻址方案的演进DNS寻址方案的演进路线 userservice pod DNS userservice pod userservice pod 1. 服务部署 • ServiceType=ClusterIP • ServiceName=userservice • ClusterIP=10.254.162.44 • Domain=userservice.default.svc.cluster.local 2. 生成DNS记录 • userservice pod DNS userservice pod userservice pod 1. 服务部署 • ServiceType=ClusterIP • ServiceName=userservice • ClusterIP=10.254.162.44 • Domain=userservice.default.svc.cluster.local 2. 生成DNS记录 •

Container Platform 4.8 CLI 工具 工具 38 创建 TLS secret 用法示例 用法示例 2.5.1.58. oc create service clusterip 创建 ClusterIP 服务。 用法示例 用法示例 2.5.1.59. oc create service externalname 创建 ExternalName 服务。 用法示例 用法示例 Create a new ClusterIP service named my-cs oc create service clusterip my-cs --tcp=5678:8080 # Create a new ClusterIP service named my-cs (in headless mode) oc create service clusterip my-cs --clusterip="None" services # Observe changes to services, including the clusterIP and invoke a script for each oc observe services --template '{ .spec.clusterIP }' -- register_dns.sh # Observe changes to services

echo-b-host-6b7fc94b7c-xtsff 1/1 Running 0 66s host-to-b-multi-node-clusterip-85476cd779-bpg4b 1/1 Running 0 66s host-to-b-multi-node-headless-dc6c44cb5-8jdz8 pod-to-b-intra-node-nodeport-9b487cf89-6ptrt 1/1 Running 0 65s pod-to-b-multi-node-clusterip-7db5dfdcf7-jkjpw 1/1 Running 0 66s pod-to-b-multi-node-headless-7d44b85d69-mtscc echo-b-host-6b7fc94b7c-xtsff 1/1 Running 0 66s host-to-b-multi-node-clusterip-85476cd779-bpg4b 1/1 Running 0 66s host-to-b-multi-node-headless-dc6c44cb5-8jdz8

"influxdb.labels" . | nindent 4 }} app.kubernetes.io/component: backup spec: type: ClusterIP ports: - port: 9999 targetPort: 9999 protocol: TCP name: http selector: | nindent 4 }} app.kubernetes.io/component: backup spec: type: ClusterIP sessionAffinity: None clusterIP: None ports: - port: 9999 targetPort: 9999 protocol: TCP readOnlyRootFilesystem: true # runAsNonRoot: true # runAsUser: 1000 service: type: ClusterIP port: 8888 ingress: enabled: false annotations: {} # kubernetes.io/ingress

的⽹络类型。 ⾸云⽀持ClusterIp ClusterIp 是 Kubernetes 中默认的服务类型 （ServiceType），选择此种类型，对应的 Service 将被分配 ⼀个集群内部的 IP 地址，只能在集群内部被访问。 NodePort 在每台 Node 的固定端⼝上暴露服务，选择 NodePort 的服务类型，集群会⾃动创建⼀个 ClusterIp 类型 的服务，负责处理Node接收到的外部流量。集群外部的 类型：选择服务类型，即服务访问的⽅式。包括： ClusterIP ：指通过集群的内部 IP 暴露服务，选择该值，服务只能够在集群内部可以访问，这 也是默认的 ServiceType。 NodePort：通过每个 Node 上的 IP 和静态端⼝（NodePort）暴露服务。NodePort 服务会路 由到 ClusterIP 服务，这个 ClusterIP 服务会⾃动创建。通过请求 : ports: 10 - port: 3306 11 selector: 12 app: wordpress 13 tier: mysql 14 clusterIP: None 15 --- 16 apiVersion: v1 17 kind: PersistentVolumeClaim 18 metadata: 19 name: mysql-pv-claim

用法示例 2.5.1.57. oc create secret tls 创建 TLS secret 用法示例 用法示例 2.5.1.58. oc create service clusterip 创建 ClusterIP 服务 用法示例 用法示例 2.5.1.59. oc create service externalname 创建 ExternalName 服务 用法示例 用法示例 2 Create a new ClusterIP service named my-cs oc create service clusterip my-cs --tcp=5678:8080 # Create a new ClusterIP service named my-cs (in headless mode) oc create service clusterip my-cs --clusterip="None" services # Observe changes to services, including the clusterIP and invoke a script for each oc observe services --template '{ .spec.clusterIP }' -- register_dns.sh # Observe changes to services