使用MetalLB公开Kubernetes群集
我有一个由一个主节点和两个辅助节点组成的纯金属集群。主节点有2个网络接口。其中一个网络接口已分配公共_IP 使用主节点中的第二个网络接口连接节点。详情如下:使用MetalLB公开Kubernetes群集,kubernetes,nginx-ingress,metallb,Kubernetes,Nginx Ingress,Metallb,我有一个由一个主节点和两个辅助节点组成的纯金属集群。主节点有2个网络接口。其中一个网络接口已分配公共_IP 使用主节点中的第二个网络接口连接节点。详情如下: kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT kubectl apply
kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP
kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT
kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
node0 Ready master 3h44m v1.17.0 PUBLIC_IP <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node1 Ready <none> 3h40m v1.17.0 10.6.129.228 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node2 Ready <none> 3h40m v1.17.0 10.6.129.47 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.8.3/manifests/metallb.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP
kubectl run nginx --image=nginx --port=80
kubectl expose deployment nginx --type=LoadBalancer --name=nginx-service
kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx 1/1 1 1 31m
kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h50m
nginx-service LoadBalancer 10.96.114.88 <pending> 80:31246/TCP 31m
kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-5578584966-vkgvv 1/1 Running 0 32m`enter code here`
kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels: run=nginx
Annotations: <none>
Selector: run=nginx
Type: LoadBalancer
IP: 10.96.114.88
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 31246/TCP
Endpoints: 10.36.0.0:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
然后,工人按如下方式连接:
kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP
kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT
kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
node0 Ready master 3h44m v1.17.0 PUBLIC_IP <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node1 Ready <none> 3h40m v1.17.0 10.6.129.228 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node2 Ready <none> 3h40m v1.17.0 10.6.129.47 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.8.3/manifests/metallb.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP
kubectl run nginx --image=nginx --port=80
kubectl expose deployment nginx --type=LoadBalancer --name=nginx-service
kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx 1/1 1 1 31m
kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h50m
nginx-service LoadBalancer 10.96.114.88 <pending> 80:31246/TCP 31m
kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-5578584966-vkgvv 1/1 Running 0 32m`enter code here`
kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels: run=nginx
Annotations: <none>
Selector: run=nginx
Type: LoadBalancer
IP: 10.96.114.88
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 31246/TCP
Endpoints: 10.36.0.0:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
我安装了Weave,如下所示:
kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP
kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT
kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
node0 Ready master 3h44m v1.17.0 PUBLIC_IP <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node1 Ready <none> 3h40m v1.17.0 10.6.129.228 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node2 Ready <none> 3h40m v1.17.0 10.6.129.47 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.8.3/manifests/metallb.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP
kubectl run nginx --image=nginx --port=80
kubectl expose deployment nginx --type=LoadBalancer --name=nginx-service
kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx 1/1 1 1 31m
kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h50m
nginx-service LoadBalancer 10.96.114.88 <pending> 80:31246/TCP 31m
kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-5578584966-vkgvv 1/1 Running 0 32m`enter code here`
kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels: run=nginx
Annotations: <none>
Selector: run=nginx
Type: LoadBalancer
IP: 10.96.114.88
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 31246/TCP
Endpoints: 10.36.0.0:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
到目前为止,一切正常,情况如下:
kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP
kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT
kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
node0 Ready master 3h44m v1.17.0 PUBLIC_IP <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node1 Ready <none> 3h40m v1.17.0 10.6.129.228 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node2 Ready <none> 3h40m v1.17.0 10.6.129.47 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.8.3/manifests/metallb.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP
kubectl run nginx --image=nginx --port=80
kubectl expose deployment nginx --type=LoadBalancer --name=nginx-service
kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx 1/1 1 1 31m
kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h50m
nginx-service LoadBalancer 10.96.114.88 <pending> 80:31246/TCP 31m
kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-5578584966-vkgvv 1/1 Running 0 32m`enter code here`
kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels: run=nginx
Annotations: <none>
Selector: run=nginx
Type: LoadBalancer
IP: 10.96.114.88
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 31246/TCP
Endpoints: 10.36.0.0:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
配置映射如下所示:
kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP
kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT
kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
node0 Ready master 3h44m v1.17.0 PUBLIC_IP <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node1 Ready <none> 3h40m v1.17.0 10.6.129.228 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node2 Ready <none> 3h40m v1.17.0 10.6.129.47 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.8.3/manifests/metallb.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP
kubectl run nginx --image=nginx --port=80
kubectl expose deployment nginx --type=LoadBalancer --name=nginx-service
kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx 1/1 1 1 31m
kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h50m
nginx-service LoadBalancer 10.96.114.88 <pending> 80:31246/TCP 31m
kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-5578584966-vkgvv 1/1 Running 0 32m`enter code here`
kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels: run=nginx
Annotations: <none>
Selector: run=nginx
Type: LoadBalancer
IP: 10.96.114.88
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 31246/TCP
Endpoints: 10.36.0.0:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
NGINX的部署如下:
kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP
kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT
kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
node0 Ready master 3h44m v1.17.0 PUBLIC_IP <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node1 Ready <none> 3h40m v1.17.0 10.6.129.228 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node2 Ready <none> 3h40m v1.17.0 10.6.129.47 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.8.3/manifests/metallb.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP
kubectl run nginx --image=nginx --port=80
kubectl expose deployment nginx --type=LoadBalancer --name=nginx-service
kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx 1/1 1 1 31m
kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h50m
nginx-service LoadBalancer 10.96.114.88 <pending> 80:31246/TCP 31m
kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-5578584966-vkgvv 1/1 Running 0 32m`enter code here`
kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels: run=nginx
Annotations: <none>
Selector: run=nginx
Type: LoadBalancer
IP: 10.96.114.88
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 31246/TCP
Endpoints: 10.36.0.0:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
然而,结果如下:
kubeadm init --apiserver-advertise-address INTERNAL_MASTER_IP
kubeadm join INTERNAL_MASTER_IP:6443 --token TOKEN --discovery-token-ca-cert-hash sha256:CERT
kubectl apply -f "https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version | base64 | tr -d '\n')"
kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
node0 Ready master 3h44m v1.17.0 PUBLIC_IP <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node1 Ready <none> 3h40m v1.17.0 10.6.129.228 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
node2 Ready <none> 3h40m v1.17.0 10.6.129.47 <none> Ubuntu 18.04.3 LTS 4.15.0-72-generic docker://18.6.2
kubectl apply -f https://raw.githubusercontent.com/google/metallb/v0.8.3/manifests/metallb.yaml
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP
kubectl run nginx --image=nginx --port=80
kubectl expose deployment nginx --type=LoadBalancer --name=nginx-service
kubectl get deployments
NAME READY UP-TO-DATE AVAILABLE AGE
nginx 1/1 1 1 31m
kubectl get services
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 3h50m
nginx-service LoadBalancer 10.96.114.88 <pending> 80:31246/TCP 31m
kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-5578584966-vkgvv 1/1 Running 0 32m`enter code here`
kubectl describe service nginx-service
Name: nginx-service
Namespace: default
Labels: run=nginx
Annotations: <none>
Selector: run=nginx
Type: LoadBalancer
IP: 10.96.114.88
Port: <unset> 80/TCP
TargetPort: 80/TCP
NodePort: <unset> 31246/TCP
Endpoints: 10.36.0.0:80
Session Affinity: None
External Traffic Policy: Cluster
Events: <none>
kubectl获取部署
姓名就绪最新可用年龄
nginx 1/131M
kubectl获得服务
名称类型CLUSTER-IP外部IP端口年龄
kubernetes ClusterIP 10.96.0.1 443/TCP 3h50m
nginx服务负载平衡器10.96.114.88 80:31246/TCP 31m
kubectl得到豆荚
名称就绪状态重新启动
nginx-5578584966-vkgvv 1/1运行0 32m`在此处输入代码`
kubectl描述服务nginx服务
名称:nginx服务
名称空间:默认值
标签:run=nginx
注释:
选择器:run=nginx
类型:负载平衡器
IP:10.96.114.88
端口:80/TCP
目标端口:80/TCP
节点端口:31246/TCP
终点:10.36.0.0:80
会话关联:无
外部流量策略:群集
活动:
可以看出,外部IP仍处于挂起状态。你有什么想法吗?提前感谢:)您需要在metallb配置中提供IP地址范围。您提供给metallb的IP也应该是虚拟IP。不应该已经有使用IP的端点
apiVersion: v1
kind: ConfigMap
metadata:
namespace: metallb-system
name: config
data:
config: |
address-pools:
- name: default
protocol: layer2
addresses:
- PUBLIC_IP-PUBLIC_IP ## This line
谢谢你的回答。我已经更改了我的ConfigMap设置-10.96.114.1-10.96.114.10,重复这个过程EXTERNAL-IP现在是10.96.114.1,然后我可以从workers中卷曲。但是,如何通过公共IP从外部访问?IP地址10.96.114.1是否可以从外部路由到您的群集?在第2层模式下,您提供给metallb的虚拟IP应该可以路由到群集网络。这意味着所有的节点IP和额外的虚拟IP应该在同一个子网中-我在主节点中有两个网络接口。我将“-10.6.129.1-10.6.129.10”设置为范围(在第二个以太网卡的范围内),并公开NGINX:$kubectl run NGINX--image=NGINX--port=80$kubectl expose deployment NGINX--type=LoadBalancer--name=NGINX service我可以从worker(curl 10.6.129.1)中卷曲服务,获得NGINX的相应默认404页,但不是从主人那里。我不知道为什么。可能有两个网络接口。同时,我想通过我的公共IP从集群外部访问,但我不知道如何:(10.6.129.1)第二个ENI上是否配置了IP?您是否可以使用此IP从桌面访问服务器?