Service Discovery in Kubernetes¶
Applications deployed to Kubernetes are exposed through what is known as a Service
. This is an address that allows for direct communication within a Kubernetes cluster without having to go through an external ingress, load balancer, or proxy.
This is the recommended way to communicate between applications in the same Kubernetes cluster. This avoids having to expose your application to the outside world, and allows for direct communication between applications.
A Service
in Kubernetes has some interesting properties:
- It provides a single, stable address for a set of pods. This mens that if a pod dies, moves or is upgraded, the
Service
will continue to point to the remaining pods. - It can load balance traffic across multiple pods. This is useful for scaling out your application without having to change the address of the
Service
or update clients consuming your application. - Translates between ports. This is useful if you want to expose a service on a different port than the one your application is listening on. For example, you can expose port
80
on theService
and have it forward to port8080
on the pod.
Services available can be viewed with kubectl get service
in a particular namespace. The service name for a NAIS Application is the same as the Application name (metdata.name
) and is the same across any cluster where the Application is deployed. This allows for simpler configuration.
graph LR
accTitle: Service Discovery
accDescr: The diagram below how Pod A can communicate with Pod B through a Service.
pod-a --port 80--> service-b
service-b --port 8080--> pod-b-1
service-b --port 8080--> pod-b-2
pod-a[Pod A]
subgraph "Application B"
pod-b-1[Pod B]
pod-b-2[Pod B]
service-b[Service B]
end
Google Cloud Platform¶
Warning
Ensure that you've set up proper access policies for your applications.
The full hostname of a service on GCP follows this format:
On-prem¶
The full hostname of a service on-prem follows this format:
Short names¶
You often won't need to use the full hostname to contact another service.
If you’re addressing a service in the same namespace, you can use just the service name to contact it:
If the service exists in a different namespace, you must add the appropriate namespace:
Note for on-prem
If your application has webproxy enabled, you should use the full hostname for all service discovery calls.
This is to ensure that your application does not attempt to perform these in-cluster calls through the proxy, as the environment variable NO_PROXY
includes *.local
.
Created: 2021-02-19