Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Anda dapat membuat zona Direktori Layanan yang memungkinkan layanan berbasisGoogle Cloudmengkueri namespace Direktori Layanan menggunakan Cloud DNS.
Petunjuk ini mengharuskan Anda sudah memiliki namespace Direktori Layanan. Jika tidak, buat namespace terlebih dahulu menggunakan
prosedur di Mengonfigurasi Direktori Layanan.
Setelah Anda melampirkan zona Direktori Layanan ke namespace, semua layanan dan endpoint dalam namespace akan tersedia melalui DNS di jaringan pribadi. Semua update layanan dan endpoint akan segera ditampilkan di
data DNS-nya. Namun, layanan dan endpoint tidak tersedia
melalui DNS.
Izin yang diperlukan untuk langkah ini
Untuk menjalankan tugas ini, Anda harus diberi izin berikut
atau peran IAM berikut.
Izin
servicedirectory.namespaces.associatePrivateZone
Peran
servicedirectory.admin
servicedirectory.editor
Batasan
Integrasi Direktori Layanan dengan Cloud DNS memiliki batasan berikut:
Anda hanya dapat mengaitkan zona Direktori Layanan dengan namespace saat membuat zona.
Zona Direktori Layanan harus berada dalam project yang sama dengan namespace Direktori Layanan yang terkait.
Zona Direktori Layanan juga tidak boleh berupa zona penerusan, zona pribadi reguler, atau zona publik.
Membuat zona Direktori Layanan yang didukung oleh namespace
Anda hanya dapat mengaitkan zona Direktori Layanan dengan namespace saat membuat zona. Zona Direktori Layanan juga tidak boleh berupa zona penerusan, zona pribadi reguler, atau zona publik.
Konsol
Buka halaman Cloud DNS di Google Cloud konsol. Buka Cloud DNS
Klik Buat zona.
Di bagian Jenis zona, klik Pribadi.
Masukkan nama untuk zona.
Masukkan nama DNS untuk zona.
Di bagian Opsi, pilih Gunakan namespace direktori layanan.
Di bagian Networks, pilih satu atau beberapa jaringan yang dapat menggunakan zona Direktori Layanan.
Pilih Region tempat namespace yang ingin ditautkan berada.
SD_ZONE: nama zona Direktori Layanan yang Anda
buat.
DNS_NAME: nama DNS, seperti
us-east1.example.com., untuk zona baru.
DESCRIPTION: deskripsi zona, seperti this zone
is backed by Service Directory.
https://www.googleapis.com/compute/v1/projects/PROJECT_ID/global/networks/NETWORK:
FQDN jaringan yang dapat menggunakan zona.
https://www.servicedirectory.googleapis.com/v1/projects/PROJECT_ID/locations/REGION/registries/NAMESPACE_NAME:
FQDN namespace yang Anda tautkan.
Menghapus zona Direktori Layanan
Anda dapat menghapus zona Direktori Layanan kapan saja. Penghapusan ini terjadi melalui Cloud DNS dan tidak memengaruhi namespace Direktori Layanan terkait. Namespace terkait terus
tersedia untuk pencarian melalui HTTP dan gRPC. Untuk mengetahui informasi selengkapnya, lihat
Menghapus zona terkelola.
Anda dapat menghapus layanan atau namespace yang memiliki zona Direktori Layanan yang mengarah ke layanan tersebut tanpa menghapus zona. Jika Anda melakukannya, kueri DNS lebih lanjut untuk layanan tersebut akan menampilkan NXDOMAIN.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-11 UTC."],[],[],null,["# Configure a DNS zone\n\nYou can create a Service Directory zone that allows your\nGoogle Cloud-based services to query your Service Directory namespace\nusing Cloud DNS.\n\nThese instructions require that you already have a Service Directory\nnamespace in place. If you do not, first create a namespace using the\nprocedure in [Configuring\nService Directory](/service-directory/docs/configuring-service-directory).\n\nOnce you have attached a Service Directory zone to the namespace, all\nservices and endpoints within the namespace become available over DNS on the\nprivate network. All service and endpoint updates are immediately reflected in\ntheir DNS records. However, the service and the endpoint are not available\nover DNS.\n\n#### Permissions required for this task\n\nTo perform this task, you must have been granted the following permissions\n*or* the following IAM roles.\n\n**Permissions**\n\n- `servicedirectory.namespaces.associatePrivateZone`\n\n**Roles**\n\n- `servicedirectory.admin`\n- `servicedirectory.editor`\n| **Note:** Service visibility (*who* is authorized to look up a service) changes once a Service Directory private zone is assigned to a namespace. The network, not IAM, determines the access when responding to DNS queries. For more details, see [Roles and permissions](/dns/docs/access-control).\n\nLimitations\n-----------\n\nService Directory integration with Cloud DNS has the following\nlimitations:\n\n- You can only associate a Service Directory zone with a namespace when you create the zone.\n- A Service Directory zone must be in the same project as the Service Directory namespace that it is associated with.\n- A Service Directory zone cannot also be a forwarding zone, a regular private zone, or a public zone.\n\nCreate a Service Directory zone backed by a namespace\n-----------------------------------------------------\n\nYou can only associate a Service Directory zone with a namespace when you\ncreate the zone. A Service Directory zone cannot also be a forwarding zone,\na regular private zone, or a public zone. \n\n### Console\n\n1. Go to the Cloud DNS page in the Google Cloud console. \n [Go to Cloud DNS](https://console.cloud.google.com/net-services/dns/zones)\n2. Click **Create zone**.\n3. In the **Zone type** section, click **Private**.\n4. Enter a name for the zone.\n5. Enter a DNS name for the zone.\n6. Under **Options** , select **Use a service directory namespace**.\n7. Under **Networks**, select one or more networks that can use the Service Directory zone.\n8. Select the **Region** where the namespace that you want to link lives.\n9. Select the **Namespace** that you want to link.\n10. Click **Create**.\n\n### gcloud\n\n```\ngcloud dns managed-zones create SD_ZONE \\\n --dns-name DNS_NAME \\\n --description DESCRIPTION \\\n --visibility private \\\n --networks https://www.googleapis.com/compute/v1/projects/project_ID/global/networks/network \\\n --service-directory-namespace https://servicedirectory.googleapis.com/v1/projects/project_ID/locations/region/namespaces/namespace-name\n```\n\nReplace the following values:\n\n- \u003cvar translate=\"no\"\u003eSD_ZONE\u003c/var\u003e: the name of the Service Directory zone that you are creating.\n- \u003cvar translate=\"no\"\u003eDNS_NAME\u003c/var\u003e: the DNS name, such as `us-east1.example.com.`, for the new zone.\n- \u003cvar translate=\"no\"\u003eDESCRIPTION\u003c/var\u003e: a description of the zone, such as `this zone\n is backed by Service Directory`.\n- https://www.googleapis.com/compute/v1/projects/\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e/global/networks/\u003cvar translate=\"no\"\u003eNETWORK\u003c/var\u003e: the FQDN of the networks that can use the zone.\n- https://www.servicedirectory.googleapis.com/v1/projects/\u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e/locations/\u003cvar translate=\"no\"\u003eREGION\u003c/var\u003e/registries/\u003cvar translate=\"no\"\u003eNAMESPACE_NAME\u003c/var\u003e: the FQDN of the namespace that you are linking.\n| **Note:** You can associate only one Service Directory zone with a given namespace, and you cannot associate a given zone with multiple namespaces. You must create the Cloud DNS zone and the Service Directory namespace in the same project.\n\nDelete the Service Directory zone\n---------------------------------\n\nAt any point, you can delete a Service Directory zone. This deletion\nhappens through Cloud DNS and has no effect on any associated\nService Directory namespaces. The associated namespace continues to be\navailable for look up through HTTP and gRPC. For more information, see\n[Delete a managed zone](/dns/docs/zones#delete_a_managed_zone).\n\nYou can [delete a\nservice](/service-directory/docs/configuring-service-directory#deleting_a_service_from_a_namespace)\nor namespace that has a Service Directory zone pointing to it without\ndeleting the zone. If you do, any further DNS queries for that service return\n`NXDOMAIN`.\n\nWhat's next\n-----------\n\n- To learn how to secure Service Directory in a service perimeter, see [Service Directory and VPC Service Controls](/service-directory/docs/securing-with-vpc-sc).\n- To get an overview of Service Directory, see the [Service Directory overview](/service-directory/docs/overview).\n- To find solutions for common issues that you might encounter when using Service Directory, see [Troubleshooting](/service-directory/docs/troubleshooting)."]]
