{"id":1040,"date":"2017-10-09T07:21:47","date_gmt":"2017-10-09T07:21:47","guid":{"rendered":"https:\/\/www.ipcpu.com\/?p=1040"},"modified":"2018-06-09T07:27:29","modified_gmt":"2018-06-09T07:27:29","slug":"traefik-kubernetes","status":"publish","type":"post","link":"https:\/\/c.ipcpu.com\/2017\/10\/traefik-kubernetes\/","title":{"rendered":"traefik\u8d1f\u8f7d\u5747\u8861\u5668\u4ecb\u7ecd(Kubernetes\u73af\u5883)"},"content":{"rendered":"

traefik.md<\/p>\n

\u4e00\u3001Kubernetes \u670d\u52a1\u66b4\u9732\u4ecb\u7ecd<\/h2>\n

\u4ece kubernetes 1.2 \u7248\u672c\u5f00\u59cb\uff0ckubernetes\u63d0\u4f9b\u4e86 Ingress \u5bf9\u8c61\u6765\u5b9e\u73b0\u5bf9\u5916\u66b4\u9732\u670d\u52a1\uff1b\u5230\u76ee\u524d\u4e3a\u6b62 kubernetes \u603b\u5171\u6709\u4e09\u79cd\u66b4\u9732\u670d\u52a1\u7684\u65b9\u5f0f:<\/p>\n

\n

LoadBlancer Service
\n NodePort Service
\n Ingress<\/p>\n<\/blockquote>\n

1.1\u3001LoadBlancer Service<\/h4>\n

LoadBlancer Service \u662f kubernetes \u6df1\u5ea6\u7ed3\u5408\u4e91\u5e73\u53f0\u7684\u4e00\u4e2a\u7ec4\u4ef6\uff1b\u5f53\u4f7f\u7528 LoadBlancer Service \u66b4\u9732\u670d\u52a1\u65f6\uff0c\u5b9e\u9645\u4e0a\u662f\u901a\u8fc7\u5411\u5e95\u5c42\u4e91\u5e73\u53f0\u7533\u8bf7\u521b\u5efa\u4e00\u4e2a\u8d1f\u8f7d\u5747\u8861\u5668\u6765\u5411\u5916\u66b4\u9732\u670d\u52a1\uff1b\u76ee\u524d LoadBlancer Service \u652f\u6301\u7684\u4e91\u5e73\u53f0\u5df2\u7ecf\u76f8\u5bf9\u5b8c\u5584\uff0c\u6bd4\u5982\u56fd\u5916\u7684 GCE\u3001DigitalOcean\uff0c\u56fd\u5185\u7684 \u963f\u91cc\u4e91\uff0c\u79c1\u6709\u4e91 Openstack \u7b49\u7b49\uff0c\u7531\u4e8e LoadBlancer Service \u6df1\u5ea6\u7ed3\u5408\u4e86\u4e91\u5e73\u53f0\uff0c\u6240\u4ee5\u53ea\u80fd\u5728\u4e00\u4e9b\u4e91\u5e73\u53f0\u4e0a\u6765\u4f7f\u7528<\/p>\n

1.2\u3001NodePort Service<\/h4>\n

NodePort Service \u987e\u540d\u601d\u4e49\uff0c\u5b9e\u8d28\u4e0a\u5c31\u662f\u901a\u8fc7\u5728\u96c6\u7fa4\u7684\u6bcf\u4e2a node \u4e0a\u66b4\u9732\u4e00\u4e2a\u7aef\u53e3\uff0c\u7136\u540e\u5c06\u8fd9\u4e2a\u7aef\u53e3\u6620\u5c04\u5230\u67d0\u4e2a\u5177\u4f53\u7684 service \u6765\u5b9e\u73b0\u7684\uff0c\u867d\u7136\u6bcf\u4e2a node \u7684\u7aef\u53e3\u6709\u5f88\u591a(0~65535)\uff0c\u4f46\u662f\u7531\u4e8e\u5b89\u5168\u6027\u548c\u6613\u7528\u6027(\u670d\u52a1\u591a\u4e86\u5c31\u4e71\u4e86\uff0c\u8fd8\u6709\u7aef\u53e3\u51b2\u7a81\u95ee\u9898)\u5b9e\u9645\u4f7f\u7528\u53ef\u80fd\u5e76\u4e0d\u591a<\/p>\n

1.3\u3001Ingress<\/h4>\n

Ingress \u8fd9\u4e2a\u4e1c\u897f\u662f 1.2 \u540e\u624d\u51fa\u73b0\u7684\uff0c\u901a\u8fc7 Ingress \u7528\u6237\u53ef\u4ee5\u5b9e\u73b0\u4f7f\u7528 nginx \u7b49\u5f00\u6e90\u7684\u53cd\u5411\u4ee3\u7406\u8d1f\u8f7d\u5747\u8861\u5668\u5b9e\u73b0\u5bf9\u5916\u66b4\u9732\u670d\u52a1\uff0c\u4ee5\u4e0b\u8be6\u7ec6\u8bf4\u4e00\u4e0b Ingress\uff0c\u6bd5\u7adf traefik \u7528\u7684\u5c31\u662f Ingress<\/p>\n

\u4f7f\u7528 Ingress \u65f6\u4e00\u822c\u4f1a\u6709\u4e09\u4e2a\u7ec4\u4ef6:<\/p>\n

\n

\u53cd\u5411\u4ee3\u7406\u8d1f\u8f7d\u5747\u8861\u5668
\n Ingress Controller
\n Ingress<\/p>\n<\/blockquote>\n

1.3.1\u3001\u53cd\u5411\u4ee3\u7406\u8d1f\u8f7d\u5747\u8861\u5668<\/p>\n

\u53cd\u5411\u4ee3\u7406\u8d1f\u8f7d\u5747\u8861\u5668\u5f88\u7b80\u5355\uff0c\u8bf4\u767d\u4e86\u5c31\u662f nginx\u3001apache \u4ec0\u4e48\u7684\uff1b\u5728\u96c6\u7fa4\u4e2d\u53cd\u5411\u4ee3\u7406\u8d1f\u8f7d\u5747\u8861\u5668\u53ef\u4ee5\u81ea\u7531\u90e8\u7f72\uff0c\u53ef\u4ee5\u4f7f\u7528 Replication Controller\u3001Deployment\u3001DaemonSet \u7b49\u7b49\uff0c\u4e0d\u8fc7\u4e2a\u4eba\u559c\u6b22\u4ee5 DaemonSet \u7684\u65b9\u5f0f\u90e8\u7f72\uff0c\u611f\u89c9\u6bd4\u8f83\u65b9\u4fbf<\/p>\n

1.3.2\u3001Ingress Controller<\/p>\n

Ingress Controller \u5b9e\u8d28\u4e0a\u53ef\u4ee5\u7406\u89e3\u4e3a\u662f\u4e2a\u76d1\u89c6\u5668\uff0cIngress Controller \u901a\u8fc7\u4e0d\u65ad\u5730\u8ddf kubernetes API \u6253\u4ea4\u9053\uff0c\u5b9e\u65f6\u7684\u611f\u77e5\u540e\u7aef service\u3001pod \u7b49\u53d8\u5316\uff0c\u6bd4\u5982\u65b0\u589e\u548c\u51cf\u5c11 pod\uff0cservice \u589e\u52a0\u4e0e\u51cf\u5c11\u7b49\uff1b\u5f53\u5f97\u5230\u8fd9\u4e9b\u53d8\u5316\u4fe1\u606f\u540e\uff0cIngress Controller \u518d\u7ed3\u5408\u4e0b\u6587\u7684 Ingress \u751f\u6210\u914d\u7f6e\uff0c\u7136\u540e\u66f4\u65b0\u53cd\u5411\u4ee3\u7406\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u5e76\u5237\u65b0\u5176\u914d\u7f6e\uff0c\u8fbe\u5230\u670d\u52a1\u53d1\u73b0\u7684\u4f5c\u7528<\/p>\n

1.3.3\u3001Ingress<\/p>\n

Ingress \u7b80\u5355\u7406\u89e3\u5c31\u662f\u4e2a\u89c4\u5219\u5b9a\u4e49\uff1b\u6bd4\u5982\u8bf4\u67d0\u4e2a\u57df\u540d\u5bf9\u5e94\u67d0\u4e2a service\uff0c\u5373\u5f53\u67d0\u4e2a\u57df\u540d\u7684\u8bf7\u6c42\u8fdb\u6765\u65f6\u8f6c\u53d1\u7ed9\u67d0\u4e2a service;\u8fd9\u4e2a\u89c4\u5219\u5c06\u4e0e Ingress Controller \u7ed3\u5408\uff0c\u7136\u540e Ingress Controller \u5c06\u5176\u52a8\u6001\u5199\u5165\u5230\u8d1f\u8f7d\u5747\u8861\u5668\u914d\u7f6e\u4e2d\uff0c\u4ece\u800c\u5b9e\u73b0\u6574\u4f53\u7684\u670d\u52a1\u53d1\u73b0\u548c\u8d1f\u8f7d\u5747\u8861<\/p>\n

\u6709\u70b9\u61f5\u903c\uff0c\u90a3\u5c31\u770b\u56fe
\n<\/p>\n

\u4ece\u4e0a\u56fe\u4e2d\u53ef\u4ee5\u5f88\u6e05\u6670\u7684\u770b\u5230\uff0c\u5b9e\u9645\u4e0a\u8bf7\u6c42\u8fdb\u6765\u8fd8\u662f\u88ab\u8d1f\u8f7d\u5747\u8861\u5668\u62e6\u622a\uff0c\u6bd4\u5982 nginx\uff0c\u7136\u540e Ingress Controller \u901a\u8fc7\u8ddf Ingress \u4ea4\u4e92\u5f97\u77e5\u67d0\u4e2a\u57df\u540d\u5bf9\u5e94\u54ea\u4e2a service\uff0c\u518d\u901a\u8fc7\u8ddf kubernetes API \u4ea4\u4e92\u5f97\u77e5 service \u5730\u5740\u7b49\u4fe1\u606f\uff1b\u7efc\u5408\u4ee5\u540e\u751f\u6210\u914d\u7f6e\u6587\u4ef6\u5b9e\u65f6\u5199\u5165\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u7136\u540e\u8d1f\u8f7d\u5747\u8861\u5668 reload \u8be5\u89c4\u5219\u4fbf\u53ef\u5b9e\u73b0\u670d\u52a1\u53d1\u73b0\uff0c\u5373\u52a8\u6001\u6620\u5c04<\/p>\n

\u4e86\u89e3\u4e86\u4ee5\u4e0a\u5185\u5bb9\u4ee5\u540e\uff0c\u8fd9\u4e5f\u5c31\u5f88\u597d\u7684\u8bf4\u660e\u4e86\u6211\u4e3a\u4ec0\u4e48\u559c\u6b22\u628a\u8d1f\u8f7d\u5747\u8861\u5668\u90e8\u7f72\u4e3a Daemon Set\uff1b\u56e0\u4e3a\u65e0\u8bba\u5982\u4f55\u8bf7\u6c42\u9996\u5148\u662f\u88ab\u8d1f\u8f7d\u5747\u8861\u5668\u62e6\u622a\u7684\uff0c\u6240\u4ee5\u5728\u6bcf\u4e2a node \u4e0a\u90fd\u90e8\u7f72\u4e00\u4e0b\uff0c\u540c\u65f6 hostport \u65b9\u5f0f\u76d1\u542c 80 \u7aef\u53e3\uff1b\u90a3\u4e48\u5c31\u89e3\u51b3\u4e86\u5176\u4ed6\u65b9\u5f0f\u90e8\u7f72\u4e0d\u786e\u5b9a \u8d1f\u8f7d\u5747\u8861\u5668\u5728\u54ea\u7684\u95ee\u9898\uff0c\u540c\u65f6\u8bbf\u95ee\u6bcf\u4e2a node \u7684 80 \u90fd\u80fd\u6b63\u786e\u89e3\u6790\u8bf7\u6c42\uff1b\u5982\u679c\u524d\u7aef\u518d \u653e\u4e2a nginx \u5c31\u53c8\u5b9e\u73b0\u4e86\u4e00\u5c42\u8d1f\u8f7d\u5747\u8861\u3002<\/p>\n

\u4e8c\u3001Traefik \u6982\u8ff0<\/h2>\n

\u7531\u4e8e\u5fae\u670d\u52a1\u67b6\u6784\u4ee5\u53ca Docker \u6280\u672f\u548c kubernetes \u7f16\u6392\u5de5\u5177\u6700\u8fd1\u51e0\u5e74\u624d\u5f00\u59cb\u9010\u6e10\u6d41\u884c\uff0c\u6240\u4ee5\u4e00\u5f00\u59cb\u7684\u53cd\u5411\u4ee3\u7406\u670d\u52a1\u5668\u6bd4\u5982 nginx\u3001apache \u5e76\u672a\u63d0\u4f9b\u5176\u652f\u6301\uff0c\u6bd5\u7adf\u4ed6\u4eec\u4e5f\u4e0d\u662f\u5148\u77e5\uff1b\u6240\u4ee5\u624d\u4f1a\u51fa\u73b0 Ingress Controller \u8fd9\u79cd\u4e1c\u897f\u6765\u505a kubernetes \u548c\u524d\u7aef\u8d1f\u8f7d\u5747\u8861\u5668\u5982 nginx \u4e4b\u95f4\u505a\u8854\u63a5\uff1b\u5373 Ingress Controller \u7684\u5b58\u5728\u5c31\u662f\u4e3a\u4e86\u80fd\u8ddf kubernetes \u4ea4\u4e92\uff0c\u53c8\u80fd\u5199 nginx \u914d\u7f6e\uff0c\u8fd8\u80fd reload \u5b83\uff0c\u8fd9\u662f\u4e00\u79cd\u6298\u4e2d\u65b9\u6848\uff1b\u800c\u6700\u8fd1\u5f00\u59cb\u51fa\u73b0\u7684 traefik \u5929\u751f\u5c31\u662f\u63d0\u4f9b\u4e86\u5bf9 kubernetes \u7684\u652f\u6301\uff0c\u4e5f\u5c31\u662f\u8bf4 traefik \u672c\u8eab\u5c31\u80fd\u8ddf kubernetes API \u4ea4\u4e92\uff0c\u611f\u77e5\u540e\u7aef\u53d8\u5316\uff0c\u56e0\u6b64\u53ef\u4ee5\u5f97\u77e5: \u5728\u4f7f\u7528 traefik \u65f6\uff0cIngress Controller \u5df2\u7ecf\u65e0\u5375\u7528\u4e86\uff0c\u6240\u4ee5\u6574\u4f53\u67b6\u6784\u5982\u4e0b
\n<\/p>\n

\u4e09\u3001Traefik \u5b89\u88c5<\/h2>\n

Traefik\u5b98\u65b9\u7684git\u63d0\u4f9b\u4e86\u90e8\u7f72yaml\u6587\u4ef6\uff0c\u4f4d\u7f6e\u662f https:\/\/github.com\/containous\/traefik\/tree\/v1.4.0\/examples\/k8s<\/a><\/p>\n

\u6211\u7684Kubernetes\u662f1.5\u7248\u672c\uff0c\u6ca1\u6709RBAC\u3002<\/p>\n

\u5efa\u8bae\u91c7\u7528DaemonSet\u65b9\u5f0f\uff0c\u7136\u540etraefik-ui\u4e5f\u662f\u4e00\u4e2a\u5355\u72ec\u6587\u4ef6\u3002<\/p>\n

\u90e8\u7f72\u5b8c\u6bd5\u540e\uff0c\u5728\u8bbe\u7f6e\u51e0\u4e2aingress\u5c31\u53ef\u4ee5\u4eceUI\u4e0a\u770b\u5230\u4e86\uff0cUI\u4e0a\u53ea\u80fd\u67e5\u770b\u641c\u7d22\uff0c\u4e0d\u80fd\u6267\u884c\u5176\u4ed6\u64cd\u4f5c\u3002<\/p>\n

<\/p>\n

TIPS\uff1a\u5982\u679c\u90e8\u7f72\u5b8c\u6210traefik\u548ctraefik-ui\uff0c\u5e76\u4e14\u8bbe\u7f6e\u4e86ingress\uff0c\u4f46\u662fUI\u663e\u793a\u4e3a\u7a7a\uff0c\u8bf7\u9010\u4e2a\u68c0\u67e5DaemonSet\u662f\u5426\u751f\u6548\uff08\u67e5\u770b80\u7aef\u53e3\uff09\uff0ckubernetes\u7684apiserver\u76f8\u5173\u7684\u5bc6\u94a5key\u662f\u5426\u6b63\u786e\u90e8\u7f72\u3002<\/p>\n

YAML\u914d\u7f6e\u6587\u4ef6\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n

\n
---\r\napiVersion: v1\r\nkind: ServiceAccount\r\nmetadata:\r\n  name: traefik-ingress-controller\r\n  namespace: kube-system\r\n---\r\nkind: DaemonSet\r\napiVersion: extensions\/v1beta1\r\nmetadata:\r\n  name: traefik-ingress-controller\r\n  namespace: kube-system\r\n  labels:\r\n    k8s-app: traefik-ingress-lb\r\nspec:\r\n  template:\r\n    metadata:\r\n      labels:\r\n        k8s-app: traefik-ingress-lb\r\n        name: traefik-ingress-lb\r\n    spec:\r\n      serviceAccountName: traefik-ingress-controller\r\n      terminationGracePeriodSeconds: 60\r\n      hostNetwork: true\r\n      containers:\r\n      - image: traefik\r\n        name: traefik-ingress-lb\r\n        ports:\r\n        - name: http\r\n          containerPort: 80\r\n          hostPort: 80\r\n        - name: admin\r\n          containerPort: 8080\r\n        securityContext:\r\n          privileged: true\r\n        args:\r\n        - -d\r\n        - --web\r\n        - --kubernetes\r\n---\r\nkind: Service\r\napiVersion: v1\r\nmetadata:\r\n  name: traefik-ingress-service\r\n  namespace: kube-system\r\nspec:\r\n  selector:\r\n    k8s-app: traefik-ingress-lb\r\n  ports:\r\n    - protocol: TCP\r\n      port: 80\r\n      name: web\r\n    - protocol: TCP\r\n      port: 8080\r\n      name: admin\r\n  type: NodePort<\/code><\/pre>\n<\/div>\n
\u56db\u3001HTTPS\u8bbe\u7f6e<\/h2>\n
traefik\u4f7f\u7528https\u8981\u6bd4nginx ingress controller\u8981\u9ebb\u70e6\u4e00\u4e9b\uff0c\u6309\u7167\u5982\u4e0b\u6b65\u9aa4\u64cd\u4f5c\uff1a<\/p>\n
4.1    \u521b\u5efa\u4e00\u4e2aSecret\u7528\u6765\u5b58\u653ehttps\u8bc1\u4e66<\/h4>\n
\n
kubectl create secret generic traefik-cert --from-file=tls.crt --from-file=tls.key  --namespace=kube-system<\/code><\/pre>\n<\/div>\n
4.2    \u521b\u5efa\u4e00\u4e2aconfigmap\u7528\u6765\u5b58\u50a8traefik\u914d\u7f6e<\/h4>\n
\n
cat >> traefik.toml <<EOF\r\n# traefik.toml\r\ndefaultEntryPoints = [\"http\",\"https\"]\r\n[entryPoints]\r\n  [entryPoints.http]\r\n  address = \":80\"\r\n  [entryPoints.https]\r\n  address = \":443\"\r\n    [entryPoints.https.tls]\r\n      [[entryPoints.https.tls.certificates]]\r\n      CertFile = \"\/ssl\/tls.crt\"\r\n      KeyFile = \"\/ssl\/tls.key\"\r\nEOF\r\n\r\nkubectl create configmap traefik-conf --from-file=traefik.toml --namespace=kube-system<\/code><\/pre>\n<\/div>\n
\u8fd9\u91cc\u6ca1\u6709\u8bbe\u7f6ehttp\u5411HTTP\u7684\u8f6c\u8df3\uff0c\u6709\u9700\u8981\u7684\u53ef\u4ee5\u81ea\u884c\u8bbe\u7f6e\uff0c\u5982\u4e0b<\/p>\n
\n
  [entryPoints.http]\r\n  address = \":80\"\r\n    [entryPoints.http.redirect]\r\n      entryPoint = \"https\"\r\n<\/code><\/pre>\n<\/div>\n
4.3    \u4fee\u6539traefik\u7684DaemonSet\u914d\u7f6e\u6587\u4ef6\uff0c\u5e76\u91cd\u65b0\u521b\u5efa<\/h4>\n
\n
      containers:\r\n      - image: traefik\r\n        name: traefik-ingress-lb\r\n        volumeMounts:\r\n        - mountPath: \"\/ssl\"\r\n          name: \"ssl\"\r\n        - mountPath: \"\/config\"\r\n          name: \"config\"\r\n          [\u7701\u7565]\r\n      volumes:\r\n      - name: ssl\r\n        secret:\r\n          secretName: traefik-cert\r\n      - name: config\r\n        configMap:\r\n          name: traefik-conf<\/code><\/pre>\n<\/div>\n
\u9700\u8981\u4fee\u6539\u7684\u5730\u65b9\u67092\u4e2a\uff1a<\/p>\n
    \n
  1. containers \u90e8\u5206\u589e\u52a0volumeMounts\u6302\u8f7d\u70b9<\/li>\n
  2. volumes\u8bbe\u7f6e\u6302\u8f7d\u70b9\u7684\u7c7b\u578b\u548c\u4f4d\u7f6e\uff08\u5206\u522b\u4f7f\u7528\u4e86secret\u548cconfigMap\uff0c\u6ca1\u6709\u4f7f\u7528hostPath\u6620\u5c04Node\u673a\u5668\u4e0a\u7684\u76ee\u5f55\uff09<\/li>\n<\/ol>\n
    4.4    \u6d4b\u8bd5<\/h4>\n
    \u521b\u5efaingress\u540e\uff0c\u914d\u7f6ehosts\u5e76\u6d4b\u8bd5\uff0cHTTP\u548cHTTPS\u5747\u8bbf\u95ee\u6b63\u5e38\u3002<\/p>\n
    \n
    [root@k80 ~]# curl -I https:\/\/foo.ipcpu.com\/\r\nHTTP\/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 521\r\nContent-Type: text\/html\r\n[root@k80 ~]# curl -I http:\/\/foo.ipcpu.com\/\r\nHTTP\/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Length: 521\r\nContent-Type: text\/html<\/code><\/pre>\n<\/div>\n
    \u4e94\u3001\u53c2\u8003\u8d44\u6599<\/h2>\n
    https:\/\/docs.traefik.io\/<\/a> 
    \n    https:\/\/mritd.me\/2016\/12\/06\/try-traefik-on-kubernetes\/<\/a> 
    \n    https:\/\/ipfans.github.io\/2016\/08\/introduce-traefik-load-balance\/<\/a> 
    \n    https:\/\/medium.com\/@patrickeasters\/using-traefik-with-tls-on-kubernetes-cb67fb43a948<\/a> 
    \n    https:\/\/blog.osones.com\/en\/kubernetes-ingress-controller-with-traefik-and-lets-encrypt.html<\/a><\/p>\n
    <\/p>\n
    <\/div>\n
    <\/div>\n
    \n
    <\/div>\n
    <\/div>\n
    <\/div>\n
    <\/div>\n
    <\/div>\n<\/div>\n
    \n
    <\/div>\n
    <\/div>\n
    <\/div>\n
    <\/div>\n
    <\/div>\n<\/div>\n
    <\/wiz_tmp_tag><\/p>\n
    \u8f6c\u8f7d\u8bf7\u6ce8\u660e\uff1aIPCPU-\u7f51\u7edc\u4e4b\u8def<\/a> » traefik\u8d1f\u8f7d\u5747\u8861\u5668\u4ecb\u7ecd(Kubernetes\u73af\u5883)<\/a><\/p>","protected":false},"excerpt":{"rendered":"
    traefik.md \u4e00\u3001Kubernetes \u670d\u52a1\u66b4\u9732\u4ecb\u7ecd \u4ece kubernetes 1.2 \u7248\u672c\u5f00\u59cb\uff0ckubernetes\u63d0\u4f9b\u4e86 Ingress \u5bf9\u8c61\u6765\u5b9e\u73b0\u5bf9\u5916\u66b4\u9732\u670d\u52a1\uff1b\u5230\u76ee\u524d\u4e3a\u6b62 kubernetes \u603b\u5171\u6709\u4e09\u79cd\u66b4\u9732\u670d\u52a1\u7684\u65b9\u5f0f: LoadBlancer Service NodePort Service Ingress 1.1\u3001LoadBlancer Service LoadBlancer Service \u662f kubernetes \u6df1\u5ea6\u7ed3\u5408\u4e91\u5e73\u53f0\u7684\u4e00\u4e2a\u7ec4\u4ef6\uff1b\u5f53\u4f7f\u7528 LoadBlancer Service \u66b4\u9732\u670d\u52a1\u65f6\uff0c\u5b9e\u9645\u4e0a\u662f\u901a\u8fc7\u5411\u5e95\u5c42\u4e91\u5e73\u53f0\u7533\u8bf7\u521b\u5efa\u4e00\u4e2a\u8d1f\u8f7d\u5747\u8861\u5668\u6765\u5411\u5916\u66b4\u9732\u670d\u52a1\uff1b\u76ee\u524d LoadBlancer Service \u652f\u6301\u7684\u4e91\u5e73\u53f0\u5df2\u7ecf\u76f8\u5bf9\u5b8c\u5584\uff0c\u6bd4\u5982\u56fd\u5916\u7684 GCE\u3001DigitalOcean\uff0c\u56fd\u5185\u7684 \u963f\u91cc\u4e91\uff0c\u79c1\u6709\u4e91 Openstack \u7b49\u7b49\uff0c\u7531\u4e8e LoadBlancer Service \u6df1\u5ea6\u7ed3\u5408\u4e86\u4e91\u5e73\u53f0\uff0c\u6240\u4ee5\u53ea\u80fd\u5728\u4e00\u4e9b\u4e91\u5e73\u53f0\u4e0a\u6765\u4f7f\u7528 1.2\u3001NodePort Service NodePort Service \u987e\u540d\u601d\u4e49\uff0c\u5b9e\u8d28\u4e0a\u5c31\u662f\u901a\u8fc7\u5728\u96c6\u7fa4\u7684\u6bcf\u4e2a node \u4e0a\u66b4\u9732\u4e00\u4e2a\u7aef\u53e3\uff0c\u7136\u540e\u5c06\u8fd9\u4e2a\u7aef\u53e3\u6620\u5c04\u5230\u67d0\u4e2a\u5177\u4f53\u7684 service \u6765\u5b9e\u73b0\u7684\uff0c\u867d\u7136\u6bcf\u4e2a node \u7684\u7aef\u53e3\u6709\u5f88\u591a(0~65535)\uff0c\u4f46\u662f\u7531\u4e8e\u5b89\u5168\u6027\u548c\u6613\u7528\u6027(\u670d\u52a1\u591a\u4e86\u5c31\u4e71\u4e86\uff0c\u8fd8\u6709\u7aef\u53e3\u51b2\u7a81\u95ee\u9898)\u5b9e\u9645\u4f7f\u7528\u53ef\u80fd\u5e76\u4e0d\u591a 1.3\u3001Ingress Ingress \u8fd9\u4e2a\u4e1c\u897f\u662f 1.2 \u540e\u624d\u51fa\u73b0\u7684\uff0c\u901a\u8fc7 Ingress \u7528\u6237\u53ef\u4ee5\u5b9e\u73b0\u4f7f\u7528 nginx […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[13],"tags":[175,173,129,146,125,174,127],"_links":{"self":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/1040"}],"collection":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/comments?post=1040"}],"version-history":[{"count":2,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/1040\/revisions"}],"predecessor-version":[{"id":1046,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/1040\/revisions\/1046"}],"wp:attachment":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/media?parent=1040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/categories?post=1040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/tags?post=1040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}