前言

最近在学习如何应用k8s搭建nacos服务以及如何应用,记录下来分享给大家。

筹备工作

  • K8S:我应用的是阿里云ACK(阿里的k8s服务),
  • Nacos:因为我应用的是阿里云RDS的mysql,所以 用的是nacos-group/nacos-k8s的nacos-no-pvc-ingress.yaml文件

    开始搭建

    首先咱们来查看nacos-no-pvc-ingress.yaml文件

    ###应用自建数据库;应用Ingress公布配置后盾###---apiVersion: v1kind: Servicemetadata:name: nacos-headlesslabels:  app: nacos-headlessspec:type: ClusterIPclusterIP: Noneports:  - port: 8848    name: server    targetPort: 8848  - port: 9848    name: client-rpc    targetPort: 9848  - port: 9849    name: raft-rpc    targetPort: 9849    ## 兼容1.4.x版本的选举端口  - port: 7848    name: old-raft-rpc    targetPort: 7848selector:  app: nacos---apiVersion: v1kind: ConfigMapmetadata:name: nacos-cmdata:mysql.host: "10.127.1.12"mysql.db.name: "nacos_devtest"mysql.port: "3306"mysql.user: "nacos"mysql.password: "passwd"---apiVersion: apps/v1kind: StatefulSetmetadata:name: nacosspec:serviceName: nacos-headlessreplicas: 3template:  metadata:    labels:      app: nacos    annotations:      pod.alpha.kubernetes.io/initialized: "true"  spec:    affinity:      podAntiAffinity:        requiredDuringSchedulingIgnoredDuringExecution:          - labelSelector:              matchExpressions:                - key: "app"                  operator: In                  values:                    - nacos            topologyKey: "kubernetes.io/hostname"    containers:      - name: k8snacos        imagePullPolicy: Always        image: nacos/nacos-server:latest        resources:          requests:            memory: "2Gi"            cpu: "500m"        ports:          - containerPort: 8848            name: client          - containerPort: 9848            name: client-rpc          - containerPort: 9849            name: raft-rpc          - containerPort: 7848            name: old-raft-rpc        env:          - name: NACOS_REPLICAS            value: "3"          - name: MYSQL_SERVICE_HOST            valueFrom:              configMapKeyRef:                name: nacos-cm                key: mysql.host          - name: MYSQL_SERVICE_DB_NAME            valueFrom:              configMapKeyRef:                name: nacos-cm                key: mysql.db.name          - name: MYSQL_SERVICE_PORT            valueFrom:              configMapKeyRef:                name: nacos-cm                key: mysql.port          - name: MYSQL_SERVICE_USER            valueFrom:              configMapKeyRef:                name: nacos-cm                key: mysql.user          - name: MYSQL_SERVICE_PASSWORD            valueFrom:              configMapKeyRef:                name: nacos-cm                key: mysql.password          - name: MODE            value: "cluster"          - name: NACOS_SERVER_PORT            value: "8848"          - name: PREFER_HOST_MODE            value: "hostname"          - name: NACOS_SERVERS            value: "nacos-0.nacos-headless.default.svc.cluster.local:8848 nacos-1.nacos-headless.default.svc.cluster.local:8848 nacos-2.nacos-headless.default.svc.cluster.local:8848"selector:  matchLabels:    app: nacos---# ------------------- App Ingress ------------------- #apiVersion: extensions/v1beta1kind: Ingressmetadata:name: nacos-headlessnamespace: defaultspec:rules:- host: nacos-web.nacos-demo.com  http:    paths:    - path: /      backend:        serviceName: nacos-headless        servicePort: server

接着咱们改改下面的配置文件变成咱们本人的。

  • 1、ingress反对https,这里有篇应用cert-manager申请收费的HTTPS证书具体过程就不叙述了,过程为:
  1. 部署cert-manager
  2. 创立ClusterIssuer
  3. 创立Ingress资源对象
  • 2、ingress配置http 主动跳转到https,应用nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'注解
  • 3、ConfigMap配置本人的Mysql地址和明码
  • 4、StatefulSet集群模式下配置正本数replicas至多为2,否则不起作用
  • 5、StatefulSet设置内存、CPU和模式

内存、CPU:

- name: k8snacos  imagePullPolicy: Always  image: nacos/nacos-server:latest  resources:    requests:      memory: "256Mi"      cpu: "250m"

模式:

- name: MODE  # 单机部署,value: "standalone"   # 集群部署,value: "cluster"      value: "cluster"  

其余的都不必变,如下所示 :

#参考:/Users/zhangwei/Development/com.github/nacos-k8s/deploy/nacos/nacos-no-pvc-ingress.yamlapiVersion: extensions/v1beta1kind: Ingressmetadata:  name: nacos-headless  namespace: default  annotations:    kubernetes.io/ingress.class: nginx    # 增加cert-manager.io/cluster-issuer注解    cert-manager.io/cluster-issuer: "letsencrypt-prod-http01"    nginx.ingress.kubernetes.io/service-weight: ''    nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'spec:  # 增加ssl证书  tls:    - hosts:        # 替换为您的域名        - baidu.com              secretName: server-seaurl-tls  rules:    - host: baidu.com      http:        paths:          - path: /nacos            backend:              serviceName: nacos-headless              servicePort: server---apiVersion: v1kind: Servicemetadata:  name: nacos-headless  labels:    app: nacos-headlessspec:  type: ClusterIP  # headless service  clusterIP: None  ports:    - port: 8848      name: server      targetPort: 8848    - port: 9848      name: client-rpc      targetPort: 9848    - port: 9849      name: raft-rpc      targetPort: 9849    ## 兼容1.4.x版本的选举端口    - port: 7848      name: old-raft-rpc      targetPort: 7848  selector:    app: nacos---apiVersion: v1kind: ConfigMapmetadata:  name: nacos-cmdata:  mysql.host: "your-aliyun-rds-host"  mysql.db.name: "nacos"  mysql.port: "3306"  mysql.user: "username"  mysql.password: "password"---apiVersion: apps/v1kind: StatefulSetmetadata:  name: nacosspec:  serviceName: nacos-headless  # 单机模式设置成1,集群模式设置成3  replicas: 3  template:    metadata:      labels:        app: nacos      annotations:        pod.alpha.kubernetes.io/initialized: "true"    spec:      affinity:        podAntiAffinity:          requiredDuringSchedulingIgnoredDuringExecution:            - labelSelector:                matchExpressions:                  - key: "app"                    operator: In                    values:                      - nacos              topologyKey: "kubernetes.io/hostname"      containers:        - name: k8snacos          imagePullPolicy: Always          image: nacos/nacos-server:latest          resources:            requests:              memory: "256Mi"              cpu: "250m"          ports:            - containerPort: 8848              name: client            - containerPort: 9848              name: client-rpc            - containerPort: 9849              name: raft-rpc            - containerPort: 7848              name: old-raft-rpc          env:            - name: NACOS_REPLICAS              # 单机模式设置成1,集群模式设置成3              value: "3"            - name: MYSQL_SERVICE_HOST # 增加 mysql 拜访地址的环境变量              valueFrom:                configMapKeyRef:                  name: nacos-cm                  key: mysql.host            - name: MYSQL_SERVICE_DB_NAME              valueFrom:                configMapKeyRef:                  name: nacos-cm                  key: mysql.db.name            - name: MYSQL_SERVICE_PORT              valueFrom:                configMapKeyRef:                  name: nacos-cm                  key: mysql.port            - name: MYSQL_SERVICE_USER              valueFrom:                configMapKeyRef:                  name: nacos-cm                  key: mysql.user            - name: MYSQL_SERVICE_PASSWORD              valueFrom:                configMapKeyRef:                  name: nacos-cm                  key: mysql.password            - name: NACOS_SERVER_PORT              value: "8848"            - name: NACOS_APPLICATION_PORT              value: "8848"            - name: PREFER_HOST_MODE              value: "hostname"            - name: NACOS_SERVERS              # 单机模式设置成nacos-0.xxxx,集群模式要增加:nacos-1.xxxx和nacos-2.xxxxx              value: "nacos-0.nacos-headless.default.svc.cluster.local:8848 nacos-1.nacos-headless.default.svc.cluster.local:8848 nacos-2.nacos-headless.default.svc.cluster.local:8848"            - name: MODE              # 单机部署,value: "standalone"               # 集群部署,value: "cluster"                  value: "cluster"              selector:    matchLabels:      app: nacos

而后执行命令来创立Nacos服务:

kubectl apply -f nacos.yaml

通过命令查看是否胜利

kubectl get StatefulSetkubectl get ingresskubectl get svckubectl get pod


从图中能够看出部署nacos服务胜利,咱们拜访试试:

总结

1、首先咱们理解下什么是Service headless,就是type: ClusterIP且clusterIP: None的Service,所以只能通过dns对外去拜访你的服务nacos-headless,
2、单机模式没有应用过,大家能够试试

注意事项

1、如果集群模式下只有一个正本会呈现问题,至多两个正本

援用

应用cert-manager申请收费的HTTPS证书
K8S部署Nacos微服务
k8s部署单节点nacos报错 server is DOWN now, please try again later! 解决
在 Kubernetes 中应用 DNS 和 Headless Service 发现运行中的 Pod
K8S容器编排之Headless浅谈