resync content/zh/docs/tasks/network/validate-dual-stack.md
This commit is contained in:
howieyuen
parent
c42e56d811
commit
70842f2c72
|
|
@ -1,5 +1,6 @@
|
||||||
---
|
---
|
||||||
title: 验证 IPv4/IPv6 双协议栈
|
title: 验证 IPv4/IPv6 双协议栈
|
||||||
|
min-kubernetes-server-version: v1.20
|
||||||
content_type: task
|
content_type: task
|
||||||
---
|
---
|
||||||
<!--
|
<!--
|
||||||
|
|
@ -150,42 +151,45 @@ a00:100::4 pod01
|
||||||
<!--
|
<!--
|
||||||
## Validate Services
|
## Validate Services
|
||||||
|
|
||||||
Create the following Service without the `ipFamily` field set. When this field is not set, the Service gets an IP from the first configured range via `--service-cluster-ip-range` flag on the kube-controller-manager.
|
Create the following Service that does not explicitly define `.spec.ipFamilyPolicy`. Kubernetes will assign a cluster IP for the Service from the first configured `service-cluster-ip-range` and set the `.spec.ipFamilyPolicy` to `SingleStack`.
|
||||||
-->
|
-->
|
||||||
## 验证服务
|
## 验证服务
|
||||||
|
|
||||||
在不设置 `ipFamily` 字段的情况下创建以下服务。
|
创建以下未显式定义 `.spec.ipFamilyPolicy` 的 Service。
|
||||||
如果未设置此字段，则服务会通过 kube-controller-manager 上的
|
Kubernetes 将从首个配置的 `service-cluster-ip-range` 给 Service 分配集群 IP，
|
||||||
`--service-cluster-ip-range` 标志从第一个配置的范围中获取 IP。
|
并将 `.spec.ipFamilyPolicy` 设置为 `SingleStack`。
|
||||||
|
|
||||||
{{< codenew file="service/networking/dual-stack-default-svc.yaml" >}}
|
{{< codenew file="service/networking/dual-stack-default-svc.yaml" >}}
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
By viewing the YAML for the Service you can observe that the Service has the `ipFamily` field has set to reflect the address family of the first configured range set via `--service-cluster-ip-range` flag on kube-controller-manager.
|
Use `kubectl` to view the YAML for the Service.
|
||||||
-->
|
-->
|
||||||
通过查看该服务的 YAML ，你可以观察到该服务的 `ipFamily` 字段已被设置。
|
使用 `kubectl` 查看 Service 的 YAML 定义。
|
||||||
其取值反映的是通过 kube-controller-manager 的 `--service-cluster-ip-range`
|
|
||||||
标志所设置的第一个地址范围的地址族。
|
|
||||||
|
|
||||||
```shell
|
```shell
|
||||||
kubectl get svc my-service -o yaml
|
kubectl get svc my-service -o yaml
|
||||||
```
|
```
|
||||||
|
|
||||||
|
<!--
|
||||||
|
The Service has `.spec.ipFamilyPolicy` set to `SingleStack` and `.spec.clusterIP` set to an IPv4 address from the first configured range set via `--service-cluster-ip-range` flag on kube-controller-manager.
|
||||||
|
-->
|
||||||
|
该 Service 通过在 kube-controller-manager 的 `--service-cluster-ip-range`
|
||||||
|
标志设置的第一个配置范围，将 `.spec.ipFamilyPolicy` 设置为 `SingleStack`，
|
||||||
|
将 `.spec.clusterIP` 设置为 IPv4 地址。
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
creationTimestamp: "2019-09-03T20:45:13Z"
|
|
||||||
labels:
|
|
||||||
app: MyApp
|
|
||||||
name: my-service
|
name: my-service
|
||||||
namespace: default
|
namespace: default
|
||||||
resourceVersion: "485836"
|
|
||||||
selfLink: /api/v1/namespaces/default/services/my-service
|
|
||||||
uid: b6fa83ef-fe7e-47a3-96a1-ac212fa5b030
|
|
||||||
spec:
|
spec:
|
||||||
clusterIP: 10.0.29.179
|
clusterIP: 10.0.217.164
|
||||||
ipFamily: IPv4
|
clusterIPs:
|
||||||
|
- 10.0.217.164
|
||||||
|
ipFamilies:
|
||||||
|
- IPv4
|
||||||
|
ipFamilyPolicy: SingleStack
|
||||||
ports:
|
ports:
|
||||||
- port: 80
|
- port: 80
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
|
|
@ -199,25 +203,107 @@ status:
|
||||||
```
|
```
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
Create the following Service with the `ipFamily` field set to `IPv6`.
|
Create the following Service that explicitly defines `IPv6` as the first array element in `.spec.ipFamilies`. Kubernetes will assign a cluster IP for the Service from the IPv6 range configured `service-cluster-ip-range` and set the `.spec.ipFamilyPolicy` to `SingleStack`.
|
||||||
-->
|
-->
|
||||||
在 `ipFamily` 字段设置为 `IPv6` 的情况下创建一下服务。
|
创建以下显示定义 `.spec.ipFamilies` 数组中的第一个元素为 IPv6 的 Service。
|
||||||
|
Kubernetes 将 `service-cluster-ip-range` 配置的 IPv6 地址范围给 Service 分配集群 IP，
|
||||||
|
并将 `.spec.ipFamilyPolicy` 设置为 `SingleStack`。
|
||||||
|
|
||||||
{{< codenew file="service/networking/dual-stack-ipv6-svc.yaml" >}}
|
{{< codenew file="service/networking/dual-stack-ipv6-svc.yaml" >}}
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
Validate that the Service gets a cluster IP address from the IPv6 address block. You may then validate access to the service via the IP and port.
|
Use `kubectl` to view the YAML for the Service.
|
||||||
-->
|
-->
|
||||||
验证服务是否是 IPv6 地址块获取集群 IP 地址。
|
使用 `kubectl` 查看 Service 的 YAML 定义。
|
||||||
然后，你可以通过 IP 和端口验证对服务的访问。
|
|
||||||
|
```shell
|
||||||
|
kubectl get svc my-service -o yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
<!--
|
||||||
|
The Service has `.spec.ipFamilyPolicy` set to `SingleStack` and `.spec.clusterIP` set to an IPv6 address from the IPv6 range set via `--service-cluster-ip-range` flag on kube-controller-manager.
|
||||||
|
-->
|
||||||
|
该 Service 通过在 kube-controller-manager 的 `--service-cluster-ip-range`
|
||||||
|
标志设置的 IPv6 地址范围，将 `.spec.ipFamilyPolicy` 设置为 `SingleStack`，
|
||||||
|
将 `.spec.clusterIP` 设置为 IPv6 地址。
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: MyApp
|
||||||
|
name: my-service
|
||||||
|
spec:
|
||||||
|
clusterIP: fd00::5118
|
||||||
|
clusterIPs:
|
||||||
|
- fd00::5118
|
||||||
|
ipFamilies:
|
||||||
|
- IPv6
|
||||||
|
ipFamilyPolicy: SingleStack
|
||||||
|
ports:
|
||||||
|
- port: 80
|
||||||
|
protocol: TCP
|
||||||
|
targetPort: 80
|
||||||
|
selector:
|
||||||
|
app: MyApp
|
||||||
|
sessionAffinity: None
|
||||||
|
type: ClusterIP
|
||||||
|
status:
|
||||||
|
loadBalancer: {}
|
||||||
|
```
|
||||||
|
|
||||||
|
<!--
|
||||||
|
Create the following Service that explicitly defines `PreferDualStack` in `.spec.ipFamilyPolicy`. Kubernetes will assign both IPv4 and IPv6 addresses (as this cluster has dual-stack enabled) and select the `.spec.ClusterIP` from the list of `.spec.ClusterIPs` based on the address family of the first element in the `.spec.ipFamilies` array.
|
||||||
|
-->
|
||||||
|
创建以下显式定义 `.spec.ipFamilyPolicy` 为 `PreferDualStack` 的 Service。
|
||||||
|
Kubernetes 将分配 IPv4 和 IPv6 地址（因为该集群启用了双栈），
|
||||||
|
并根据 `.spec.ipFamilies` 数组中第一个元素的地址族，
|
||||||
|
从 `.spec.ClusterIPs` 列表中选择 `.spec.ClusterIP`。
|
||||||
|
|
||||||
|
{{< codenew file="service/networking/dual-stack-preferred-svc.yaml" >}}
|
||||||
|
|
||||||
|
{{< note >}}
|
||||||
|
<!--
|
||||||
|
The `kubectl get svc` command will only show the primary IP in the `CLUSTER-IP` field.
|
||||||
|
-->
|
||||||
|
`kubectl get svc` 命令将仅在 `CLUSTER-IP` 字段中显示主 IP。
|
||||||
|
|
||||||
```shell
|
```shell
|
||||||
kubectl get svc -l app=MyApp
|
kubectl get svc -l app=MyApp
|
||||||
```
|
|
||||||
```
|
|
||||||
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
|
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
|
||||||
my-service ClusterIP fe80:20d::d06b <none> 80/TCP 9s
|
my-service ClusterIP fe80:20d::d06b <none> 80/TCP 9s
|
||||||
```
|
```
|
||||||
|
{{< /note >}}
|
||||||
|
|
||||||
|
<!--
|
||||||
|
Validate that the Service gets cluster IPs from the IPv4 and IPv6 address blocks using `kubectl describe`. You may then validate access to the service via the IPs and ports.
|
||||||
|
-->
|
||||||
|
使用 `kubectl describe` 验证服务是否从 IPv4 和 IPv6 地址块中获取了集群 IP。
|
||||||
|
然后你就可以通过 IP 和端口，验证对服务的访问。
|
||||||
|
|
||||||
|
```shell
|
||||||
|
kubectl describe svc -l app=MyApp
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
Name: my-service
|
||||||
|
Namespace: default
|
||||||
|
Labels: app=MyApp
|
||||||
|
Annotations: <none>
|
||||||
|
Selector: app=MyApp
|
||||||
|
Type: ClusterIP
|
||||||
|
IP Family Policy: PreferDualStack
|
||||||
|
IP Families: IPv4,IPv6
|
||||||
|
IP: 10.0.216.242
|
||||||
|
IPs: 10.0.216.242,fd00::af55
|
||||||
|
Port: <unset> 80/TCP
|
||||||
|
TargetPort: 9376/TCP
|
||||||
|
Endpoints: <none>
|
||||||
|
Session Affinity: None
|
||||||
|
Events: <none>
|
||||||
|
```
|
||||||
|
|
||||||
<!--
|
<!--
|
||||||
### Create a dual-stack load balanced Service
|
### Create a dual-stack load balanced Service
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue