个人中心
gpt4 book ai didi

nginx - 服务未部署到 NGINX kubernetes

转载 作者：行者123 更新时间：2023-12-02 12:19:54 25 4
gpt4 key购买 nike

所以这是我目前的设置。

我有一个安装了 nginx Controller 的 k8 集群。我使用 helm 安装了 nginx。

所以我有一个简单的苹果服务如下:

kind: Pod
apiVersion: v1
metadata:
  name: apple-app
  labels:
    app: apple
spec:
  containers:
    - name: apple-app
      image: hashicorp/http-echo
      args:
        - "-text=apple"

---

kind: Service
apiVersion: v1
metadata:
  name: apple-service
spec:
  selector:
    app: apple
  ports:
    - port: 5678 # Default port for image

然后我做了一个 kubectl apply -f apples.yaml

现在我有一个 ingress.yaml 如下。 
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: example-ingress
  annotations:
    ingress.kubernetes.io/rewrite-target: /
spec:
  rules:
  - http:
      paths:
        - path: /apple
          backend:
            serviceName: apple-service
            servicePort: 5678

然后我 kubectl -f ingress.yaml

我的入口 Controller 没有外部 IP 地址。

但即使没有外部IP，我也做了一个 
kubectl exec -it nginxdeploy-nginx-ingress-controller-5d6ddbb677-774xc /bin/bash

并尝试做一个 curl kL http://localhost/apples

它给了我一个503错误。

有人可以帮忙吗？

最佳答案

我已经测试了你的配置，它对我来说似乎工作正常。

Pod 响应良好:

$ kubectl describe pod apple-app

Name:         apple-app
Namespace:    default
Node:         kube-helm/10.156.0.2
Start Time:   Mon, 10 Sep 2018 11:53:57 +0000
Labels:       app=apple
Annotations:  <none>
Status:       Running
IP:           192.168.73.73
...

$ curl http://192.168.73.73:5678
apple

服务响应良好: 
$ kubectl get service 

NAME            TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
apple-service   ClusterIP   10.111.93.194    <none>        5678/TCP   1m

$ curl http://10.111.93.194:5678
apple

Ingress 也响应良好，但默认情况下它将 http 重定向到 https: 
$ kubectl exec -it nginx-ingress-controller-6c9fcdf8d9-ggrcs -n ingress-nginx /bin/bash

www-data@nginx-ingress-controller-6c9fcdf8d9-ggrcs:/etc/nginx$ curl http://localhost/apple

<html>
<head><title>308 Permanent Redirect</title></head>
<body bgcolor="white">
<center><h1>308 Permanent Redirect</h1></center>
<hr><center>nginx/1.13.12</center>
</body>
</html>

www-data@nginx-ingress-controller-6c9fcdf8d9-ggrcs:/etc/nginx$ curl -k https://localhost/apple
apple

如果您检查 Controller pod 中的 nginx 配置，您将看到/apple 位置的重定向配置: 
www-data@nginx-ingress-controller-6c9fcdf8d9-ggrcs:/etc/nginx$ more  /etc/nginx/nginx.conf
...

                location /apple {

                        set $namespace      "default";
                        set $ingress_name   "example-ingress";
                        set $service_name   "apple-service";
                        set $service_port   "5678";
                        set $location_path  "/apple";

                        rewrite_by_lua_block {

                        }

                        log_by_lua_block {

                                monitor.call()
                        }

                        if ($scheme = https) {
                                more_set_headers                        "Strict-Transport-Security: max-age=1572
4800; includeSubDomains";
                        }

                        port_in_redirect off;

                        set $proxy_upstream_name "default-apple-service-5678";

                        # enforce ssl on server side
                        if ($redirect_to_https) {

                                return 308 https://$best_http_host$request_uri;

                        }

                        client_max_body_size                    "1m";

                        proxy_set_header Host                   $best_http_host;

                        # Pass the extracted client certificate to the backend

                        # Allow websocket connections
                        proxy_set_header                        Upgrade           $http_upgrade;

                        proxy_set_header                        Connection        $connection_upgrade;

                        proxy_set_header X-Request-ID           $req_id;
                        proxy_set_header X-Real-IP              $the_real_ip;

                        proxy_set_header X-Forwarded-For        $the_real_ip;

                        proxy_set_header X-Forwarded-Host       $best_http_host;
                        proxy_set_header X-Forwarded-Port       $pass_port;
                        proxy_set_header X-Forwarded-Proto      $pass_access_scheme;

                        proxy_set_header X-Original-URI         $request_uri;

                        proxy_set_header X-Scheme               $pass_access_scheme;

                        # Pass the original X-Forwarded-For
                        proxy_set_header X-Original-Forwarded-For $http_x_forwarded_for;

                        # mitigate HTTPoxy Vulnerability
                        # https://www.nginx.com/blog/mitigating-the-httpoxy-vulnerability-with-nginx/
                        proxy_set_header Proxy                  "";

                        # Custom headers to proxied server

                        proxy_connect_timeout                   5s;
                        proxy_send_timeout                      60s;
                        proxy_read_timeout                      60s;

                        proxy_buffering                         "off";
                        proxy_buffer_size                       "4k";
                        proxy_buffers                           4 "4k";
                        proxy_request_buffering                 "on";

                        proxy_http_version                      1.1;

                        proxy_cookie_domain                     off;
                        proxy_cookie_path                       off;

                        # In case of errors try the next upstream server before returning an error
                        proxy_next_upstream                     error timeout;
                        proxy_next_upstream_tries               3;

                        proxy_pass http://default-apple-service-5678;

                        proxy_redirect                          off;

                }

您可以通过添加 annotations 来禁用此默认行为。 : 
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: example-ingress
  annotations:
    kubernetes.io/ingress.class: "nginx"
    nginx.ingress.kubernetes.io/ssl-redirect: "false"
    ingress.kubernetes.io/rewrite-target: /
spec:
  rules:
  - http:
      paths:
        - path: /apple
          backend:
            serviceName: apple-service
            servicePort: 5678


www-data@nginx-ingress-controller-6c9fcdf8d9-ggrcs:/etc/nginx$ curl http://localhost/apple
apple

关于nginx - 服务未部署到 NGINX kubernetes，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/52244953/

25 4 0
文章推荐： kubernetes - 按名称查找 pod 时未知主机，通过 pod 重启解决
文章推荐： kotlin - sumByDouble 需要 Double 找到 Double？
文章推荐： kubernetes - 无法运行安装为具有 777 权限的 configmap 的 Bash 脚本
文章推荐： java - 为什么我不能使用 LinkedList::new？
行者123
个人简介

我是一名优秀的程序员,十分优秀！

滴滴打车优惠券免费领取
滴滴打车优惠券
全站热门文章
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com