云计算服务
服务器租用
DDOS 防护
虚拟主机
域名服务
基础设施
关于我们
作者 | 高宇航
职位 | F5解决方案顾问
在容器技术发展初期，企业只在开发、测试环境中使用容器。随着容器技术的发展以及企业对于容器技术的理论和实践的掌握逐渐加深，企业开始在生产环境中使用容器，使用规模也越来越大。K8S无疑成为了企业管理容器的首选，作为承载现代应用最重要的基础架构。
当应用微服务化后，迁移至K8S，开始考虑服务如何对外暴露，当然原生的暴露方式有很多，随着各种类型的服务逐渐迁移至K8S，使用者开始考虑入口服务能力的问题，例如，性能问题、稳定性问题、非HTTP业务发布问题、七层业务发布能力的问题、安全性问题、高效管理问题等等，随后开始调研企业级入口方案。
这篇文章给大家带来的是利用MSDA实现K8S平台的服务发现。为什么要给大家介绍这种方式呢？第一是想给大家多一种选择，第二是因为MSDA具备他自身的特性，比如轻量化、无摩擦及与平台无关化，看完之后你可能对这些特性会有一个初步的理解。
MSDA是利用iApp LX构建了一个模版，使用该模版可以创建一个服务的实例，整个创建过程如下：
MSDA实现K8S服务发现的方式有 webui 和API 两种方式：
MSDA通过webui实现服务发现的具体操作步骤如下：
01上传f5-iapplx-msda-k8s rpm包至BIGIP->iApps->Package Management LX->import
02上传完RPM包后会生成一个Templetes，iApps->Templates->Templates LX
将通用的参数证书、Endpoint地址等替换成自己环境中的参数并保存。
03创建一个实例在iApps->Application Services->Applications LX
选择模版点击Next
将namespace信息、service name、pool名称等信息填写好，点击Deploy
完成创建后，将发现的服务自动添加至Pool中
04删除此实例，需要先将该实例Undeploy，然后再删除实例
虽然大家看到webui的整个实例创建过程非常简单，但是绝大多数使用者更倾向于自动化和DevOps的方式来批量创建、销毁实例，所以今天我们重点来说明通过API的方式部署MSDA实现K8S上的服务发现。
01
上传f5-iapplx-msda-k8s rpm包至BIGIP->IApps->Package Management LX->import
如果你愿意你也可以用API导入。
02
创建一个服务的实例
1
使用Postman创建一个实例
Post的内容如下，标注释的内容需要修改为你自己定义或者环境的内容（向右滑动代码框查看注释）
{
“name”: “msdak8s1”,
“inputProperties”: [
{
“id”: “k8sEndpoint”,
“type”: “STRING”,
“value”: “https://192.168.26.31:6443”, #你自己K8s环境的endpoint地址
"metaData": {
"description": "k8s endpoint",
"displayName": "k8s endpoint",
"isRequired": true
}
},
{
"id": "authenticationCert", #下面的clientCert、key、CA需要修改为你自己环境的
"type": "JSON",
"value": {
"clientCert": "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",
"clientKey": "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",
"caCert": "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"
},
"metaData": {
"description": "k8s lient authentication certificate in base64 encoding",
"displayName": "k8s client certificate",
"isRequired": true
}
},
{
"id": "nameSpace",
"type": "STRING",
"value": "test002", #修改为你自己环境中服务所在的namespace
“metaData”: {
“description”: “Namespace in kubernetes”,
“displayName”: “Namespace Name in kubernetes”,
“isRequired”: true
}
},
{
“id”: “serviceName”,
“type”: “STRING”,
“value”: “msda1”, #修改为你对应的Service名称
"metaData": {
"description": "Service name to be exposed",
"displayName": "Service Name in kubernetes",
"isRequired": true
}
},
{
"id": "poolName",
"type": "STRING",
"value": "/Common/Pool1", #你要创建的Pool的名称
“metaData”: {
“description”: “Pool Name to be created”,
“displayName”: “BIG-IP Pool Name”,
“isRequired”: true
}
},
{
“id”: “poolType”,
“type”: “STRING”,
“value”: “round-robin”, #你要选择的负载均衡算法，请在下面list中选择
"metaData": {
"description": "load-balancing-mode",
"displayName": "Load Balancing Mode",
"isRequired": true,
"uiType": "dropdown",
"uiHints": {
"list": {
"dataList": [
"round-robin",
"least-connections-member",
"least-connections-node"
]
}
}
}
},
{
"id": "healthMonitor",
"type": "STRING",
"value": "http", #选择你要的健康检查算法，在下面list中选择
"metaData": {
"description": "Health Monitor",
"displayName": "Health Monitor",
"isRequired": true,
"uiType": "dropdown",
"uiHints": {
"list": {
"dataList": [
"tcp",
"udp",
"http",
"none"
]
}
}
}
}
],
"dataProperties": [
{
"id": "pollInterval",
"type": "NUMBER",
"value": 15, #这里是你需要多久去查询一次
“metaData”: {
“description”: “Interval of polling from BIG-IP to registry, 30s by default.”,
“displayName”: “Polling Invertal”,
“isRequired”: false
}
}
],
“configurationProcessorReference”: {
“link”: “https://localhost/mgmt/shared/iapp/processors/msdak8sConfig”
},
“auditProcessorReference”: {
“link”: “https://localhost/mgmt/shared/iapp/processors/msdak8sEnforceConfiguredAudit”
},
“audit”: {
“intervalSeconds”: 60,
“policy”: “ENFORCE_CONFIGURED”
},
“sourcePackage”: {
“packageName”: “f5-iapplx-msda-k8s-0.0.3-0003.noarch”
},
“configProcessorTimeoutSeconds”: 30,
“statsProcessorTimeoutSeconds”: 15,
“configProcessorAffinity”: {
“processorPolicy”: “LOAD_BALANCED”,
“affinityProcessorReference”: {
“link”: “https://localhost/mgmt/shared/iapp/processors/affinity/load-balanced”
}
},
“state”: “BINDING”, #如果你使用的是默认的模版，这里状态改为BINDING
"generation": 10,
"lastUpdateMicros": 1656552937409259,
"kind": "shared:iapp:blocks:blockstate",
"selfLink": "https://localhost/mgmt/shared/iapp/blocks/b4d1b6ea-30cb-35f9-8704-de9c712d522e"
}
2
F5上创建了一个新的Pool里面并没有Member（初始状态）
3
确认K8S Service和Endpoint状态
4
观察Pool里面已经自动添加了对应的成员
5
当pool成员发生变化时，会自动添加或者删除池成员
扩展deployment
池成员自动被添加
6
使用AS3将业务发布
Post内容如下：
{
"class": "AS3",
"declaration": {
"class": "ADC",
"schemaVersion": "3.1.0",
"id": "urn:uuid:3da22137-87a0-460a-b185-3592d5a13682",
"label": "Converted Declaration",
"remark": "Generated by Automation Config Converter",
"Common": {
"class": "Tenant",
"Shared": {
"class": "Application",
"template": "shared",
"vs1": {
"layer4": "tcp",
"pool": {
"bigip": "/Common/Pool1"
},
"translateServerAddress": true,
"translateServerPort": true,
"class": "Service_TCP",
"profileTCP": {
"bigip": "/Common/tcp"
},
"virtualAddresses": [
"192.168.26.188"
],
"virtualPort": 80,
"snat": "auto"
}
}
}
}
}
观察Virtual Server已经创建完成，关联了刚才创建的Pool，此API可以在Pool生成后立即执行，这就是分两段式完成了业务发布。
03
Undeploy实例
要删除实例前必须先Undeploy实例，Undeploy我们使用PATCH方法，Block后面要加上生成时产生的id
Post的数据如下，标注释的内容需要修改
“name”: “msdak8s”,
“inputProperties”: [
{
“id”: “k8sEndpoint”,
“type”: “STRING”,
“value”: “https://192.168.26.31:6443”,
“metaData”: {
“description”: “k8s endpoint”,
“displayName”: “k8s endpoint”,
“isRequired”: true
}
},
{
“id”: “authenticationCert”,
“type”: “JSON”,
“value”: {
“clientCert”: “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”,
“clientKey”: “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”ZCSE’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”,
“caCert”: “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”
},
“metaData”: {
“description”: “k8s lient authentication certificate in base64 encoding”,
“displayName”: “k8s client certificate”,
“isRequired”: true
}
},
{
“id”: “nameSpace”,
“type”: “STRING”,
“value”: “test002”,
“metaData”: {
“description”: “Namespace in kubernetes”,
“displayName”: “Namespace Name in kubernetes”,
“isRequired”: true
}
},
{
“id”: “serviceName”,
“type”: “STRING”,
“value”: “msda1”,
“metaData”: {
“description”: “Service name to be exposed”,
“displayName”: “Service Name in kubernetes”,
“isRequired”: true
}
},
{
“id”: “poolName”,
“type”: “STRING”,
“value”: “/Common/Pool1”,
“metaData”: {
“description”: “Pool Name to be created”,
“displayName”: “BIG-IP Pool Name”,
“isRequired”: true
}
},
{
“id”: “poolType”,
“type”: “STRING”,
“value”: “round-robin”,
“metaData”: {
“description”: “load-balancing-mode”,
“displayName”: “Load Balancing Mode”,
“isRequired”: true,
“uiType”: “dropdown”,
“uiHints”: {
“list”: {
“dataList”: [
“round-robin”,
“least-connections-member”,
“least-connections-node”
]
}
}
}
},
{
“id”: “healthMonitor”,
“type”: “STRING”,
“value”: “http”,
“metaData”: {
“description”: “Health Monitor”,
“displayName”: “Health Monitor”,
“isRequired”: true,
“uiType”: “dropdown”,
“uiHints”: {
“list”: {
“dataList”: [
“tcp”,
“udp”,
“http”,
“none”
]
}
}
}
}
],
“dataProperties”: [
{
“id”: “pollInterval”,
“type”: “NUMBER”,
“value”: 15,
“metaData”: {
“description”: “Interval of polling from BIG-IP to registry, 30s by default.”,
“displayName”: “Polling Invertal”,
“isRequired”: false
}
}
],
“configurationProcessorReference”: {
“link”: “https://localhost/mgmt/shared/iapp/processors/msdak8sConfig”
},
“auditProcessorReference”: {
“link”: “https://localhost/mgmt/shared/iapp/processors/msdak8sEnforceConfiguredAudit”
},
“audit”: {
“intervalSeconds”: 60,
“policy”: “ENFORCE_CONFIGURED”
},
“sourcePackage”: {
“packageName”: “f5-iapplx-msda-k8s-0.0.3-0003.noarch”
},
“configProcessorTimeoutSeconds”: 30,
“statsProcessorTimeoutSeconds”: 15,
“configProcessorAffinity”: {
“processorPolicy”: “LOAD_BALANCED”,
“affinityProcessorReference”: {
“link”: “https://localhost/mgmt/shared/iapp/processors/affinity/load-balanced”
}
},
“state”: “UNBINDING”, #如果你使用的是默认的模版，请将该处改为UNBINDING
"generation": 11, #这里你需要设置为生成实例+1
"lastUpdateMicros": 1656552937409259,
"kind": "shared:iapp:blocks:blockstate",
"selfLink": "https://localhost/mgmt/shared/iapp/blocks/b4d1b6ea-30cb-35f9-8704-de9c712d522e"
}
Undeploy实例后，其实创建的Pool已经被删除了，但是实例并没有被完全删除，你可以直接部署。请使用Undeploy的内容
“state”: “UNBINDING”, #将此处改为BINDING
"generation": 12, #generation视你当前的操作来确定，如果你写错了，响应会提示你该写几
04
删除一个实例
删除一个实例就比较简单了，我们直接使用delete方法在Block后面加上id即可
以上是通过MSDA实现K8S环境的服务自动发现的实现过程，如果有了模版，整个过程还是比较简单的，当然全部过程你可以通过web界面或者API的方式实现，但是更多的可能会想看到自动化运维的实现过程，所以我这里着重说明了使用API的方式去实现。如果各位有兴趣自己动手验证，可参考下面的链接以获取相关安装包。
免费使用
欢迎使用
下载
免责声明：
这些 iAppsLX RPM 软件包并非F5公司官方支持的产品，如有任何问题或反馈，请向 GitHub repo 上提交 issue，或发送电子邮件至 msda@f5.com
.png)
.png)
