DevOps技术

# 一、Headless类型Service简介
在某些场景下，开发人员可能不想使用Service提供的负载均衡功能，而希望自己来控制负载均衡策略，针对这种情况，Kubernetes提供了Headless Service，这类Service不会分配ClusterIP，如果想要访问Service，只能通过service的域名进行查询

# 二、环境准备
编写deployment.yaml文件，内容如下：
```yaml
apiVersion: v1
kind: Namespace
metadata:
  name: dev

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: pc-deployment
  namespace: dev
spec:
  replicas: 3
  selector:
    matchLabels:
      app: nginx-pod
  template:
    metadata:
      labels:
        app: nginx-pod
    spec:
      containers:
      - name: nginx
        image: nginx:1.17.1
        ports:
        - containerPort: 80
```
然后使用如下命令创建资源
```bash
[root@master service]# kubectl apply -f deployment.yaml
namespace/dev created
deployment.apps/pc-deployment created
[root@master service]#
```
查看创建的资源如下：
```bash
[root@master service]# kubectl get deploy,pod -n dev -o wide
NAME                            READY   UP-TO-DATE   AVAILABLE   AGE   CONTAINERS   IMAGES         SELECTOR
deployment.apps/pc-deployment   3/3     3            3           17m   nginx        nginx:1.17.1   app=nginx-pod

NAME                                 READY   STATUS    RESTARTS   AGE   IP             NODE    NOMINATED NODE   READINESS GATES
pod/pc-deployment-5ffc5bf56c-mqwst   1/1     Running   0          17m   10.244.2.191   node2   <none>           <none>
pod/pc-deployment-5ffc5bf56c-qbznm   1/1     Running   0          17m   10.244.1.53    node1   <none>           <none>
pod/pc-deployment-5ffc5bf56c-zxnsx   1/1     Running   0          17m   10.244.2.190   node2   <none>           <none>
[root@master service]#
```
## 三、创建Headless类型的Service
编辑headless.yaml文件，内容如下：
```yaml
apiVersion: v1
kind: Service
metadata:
  name: service-headless
  namespace: dev
spec:
  selector:
    app: nginx-pod
  clusterIP: None
  type: ClusterIP
  ports:
  - port: 80
    targetPort: 80
```
使用如下命令创建服务
```bash
[root@master service]# kubectl apply -f headless.yaml
service/service-headless created
[root@master service]#
```
查看创建的资源
```bash
[root@master service]# kubectl get service,deployment,pod -n dev -o wide
NAME                       TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)   AGE   SELECTOR
service/service-headless   ClusterIP   None         <none>        80/TCP    99s   app=nginx-pod

NAME                            READY   UP-TO-DATE   AVAILABLE   AGE     CONTAINERS   IMAGES         SELECTOR
deployment.apps/pc-deployment   3/3     3            3           8m50s   nginx        nginx:1.17.1   app=nginx-pod

NAME                                 READY   STATUS    RESTARTS   AGE     IP             NODE    NOMINATED NODE   READINESS GATES
pod/pc-deployment-5ffc5bf56c-mqwst   1/1     Running   0          8m50s   10.244.2.191   node2   <none>           <none>
pod/pc-deployment-5ffc5bf56c-qbznm   1/1     Running   0          8m50s   10.244.1.53    node1   <none>           <none>
pod/pc-deployment-5ffc5bf56c-zxnsx   1/1     Running   0          8m50s   10.244.2.190   node2   <none>           <none>
[root@master service]#
```
此时服务因为没有ClusterIP，所以此时不能使用ip去访问了，只能使用域名访问了，即 service-headless.dev.svc.cluster.local，这里面格式是
```bash
[service的名字].[命名空间].svc.cluster.local
```
首先登录pod查看域名解析
```bash
[root@master service]# kubectl exec -it pod/pc-deployment-5ffc5bf56c-mqwst -n dev /bin/bash
kubectl exec [POD] [COMMAND] is DEPRECATED and will be removed in a future version. Use kubectl exec [POD] -- [COMMAND] instead.
root@pc-deployment-5ffc5bf56c-9bg6w:/#
root@pc-deployment-5ffc5bf56c-9bg6w:/# cat /etc/resolv.conf
nameserver 10.96.0.10
search dev.svc.cluster.local svc.cluster.local cluster.local
options ndots:5
root@pc-deployment-5ffc5bf56c-9bg6w:/#
```

然后查看域名解析，具体查看域名的命令如下
```bash
[root@master service]# dig @10.96.0.10 service-headless.dev.svc.cluster.local

; <<>> DiG 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.9 <<>> @10.96.0.10 service-headless.dev.svc.cluster.local
; (1 server found)
;; global options: +cmd
;; Got answer:
;; WARNING: .local is reserved for Multicast DNS
;; You are currently testing what happens when an mDNS query is leaked to DNS
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62573
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;service-headless.dev.svc.cluster.local.        IN A

;; ANSWER SECTION:
service-headless.dev.svc.cluster.local. 30 IN A 10.244.2.190
service-headless.dev.svc.cluster.local. 30 IN A 10.244.1.53
service-headless.dev.svc.cluster.local. 30 IN A 10.244.2.191

;; Query time: 0 msec
;; SERVER: 10.96.0.10#53(10.96.0.10)
;; WHEN: Mon Apr 04 11:57:01 CST 2022
;; MSG SIZE  rcvd: 229

[root@master service]#
```

不积跬步，无以至千里

博客