{"id":1044,"date":"2018-01-09T07:25:32","date_gmt":"2018-01-09T07:25:32","guid":{"rendered":"https:\/\/www.ipcpu.com\/?p=1044"},"modified":"2018-06-09T07:29:40","modified_gmt":"2018-06-09T07:29:40","slug":"kubernetes-nginx-ingress","status":"publish","type":"post","link":"https:\/\/c.ipcpu.com\/2018\/01\/kubernetes-nginx-ingress\/","title":{"rendered":"Kubernetes Nginx Ingress \u6559\u7a0b"},"content":{"rendered":"<p>Kubernetes Nginx Ingress \u6559\u7a0b.md<\/p>\n<h2 id=\"\u4e00\u3001Ingress\u4ecb\u7ecd\">\u4e00\u3001Ingress \u4ecb\u7ecd<\/h2>\n<p>Kubernetes \u66b4\u9732\u670d\u52a1\u7684\u65b9\u5f0f\u76ee\u524d\u53ea\u6709\u4e09\u79cd\uff1aLoadBlancer Service\u3001NodePort Service\u3001Ingress\uff1b<\/p>\n<p>Ingress \u662f\u4ec0\u4e48\uff1f<\/p>\n<p>\u4f17\u6240\u5468\u77e5 Kubernetes \u5177\u6709\u5f3a\u5927\u7684\u526f\u672c\u63a7\u5236\u80fd\u529b\uff0c\u80fd\u4fdd\u8bc1\u5728\u4efb\u610f\u526f\u672c(Pod)\u6302\u6389\u65f6\u81ea\u52a8\u4ece\u5176\u4ed6\u673a\u5668\u542f\u52a8\u4e00\u4e2a\u65b0\u7684\uff0c\u8fd8\u53ef\u4ee5\u52a8\u6001\u6269\u5bb9\u7b49\uff0c\u603b\u4e4b\u4e00\u53e5\u8bdd\uff0c\u8fd9\u4e2a Pod \u53ef\u80fd\u5728\u4efb\u4f55\u65f6\u523b\u51fa\u73b0\u5728\u4efb\u4f55\u8282\u70b9\u4e0a\uff0c\u4e5f\u53ef\u80fd\u5728\u4efb\u4f55\u65f6\u523b\u6b7b\u5728\u4efb\u4f55\u8282\u70b9\u4e0a\uff1b\u90a3\u4e48\u81ea\u7136\u968f\u7740 Pod \u7684\u521b\u5efa\u548c\u9500\u6bc1\uff0cPod IP \u80af\u5b9a\u4f1a\u52a8\u6001\u53d8\u5316\uff1b\u90a3\u4e48\u5982\u4f55\u628a\u8fd9\u4e2a\u52a8\u6001\u7684 Pod IP \u66b4\u9732\u51fa\u53bb\uff1f<\/p>\n<p>\u501f\u52a9\u4e8e Kubernetes \u7684 Service \u673a\u5236\uff0cService \u53ef\u4ee5\u4ee5\u6807\u7b7e\u7684\u5f62\u5f0f\u9009\u5b9a\u4e00\u7ec4\u5e26\u6709\u6307\u5b9a\u6807\u7b7e\u7684 Pod\uff0c\u5e76\u76d1\u63a7\u548c\u81ea\u52a8\u8d1f\u8f7d\u4ed6\u4eec\u7684 Pod IP\uff0c\u90a3\u4e48\u6211\u4eec\u5411\u5916\u66b4\u9732\u53ea\u66b4\u9732 Service IP \u5c31\u884c\u4e86\uff1b\u8fd9\u5c31\u662f NodePort \u6a21\u5f0f\uff1a\u5373\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u5f00\u8d77\u4e00\u4e2a\u7aef\u53e3\uff0c\u7136\u540e\u8f6c\u53d1\u5230\u5185\u90e8 Service IP \u4e0a\uff0c\u5982\u4e0b\u56fe\u6240\u793aNodePort<\/p>\n<p><img decoding=\"async\" src=\"\/\/www.ipcpu.com\/wp-content\/uploads\/2018\/06\/6d74e5208c284be59692e71c15b53693_df2445ab-28fe-47ae-a030-6696da2b92c9.jpg\" style=\"vertical-align: bottom; max-width: 100%;\"><\/p>\n<p>\u91c7\u7528 NodePort \u65b9\u5f0f\u66b4\u9732\u670d\u52a1\u9762\u4e34\u4e00\u4e2a\u5751\u7239\u7684\u95ee\u9898\u662f\uff0c\u670d\u52a1\u4e00\u65e6\u591a\u8d77\u6765\uff0cNodePort \u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u5f00\u542f\u7684\u7aef\u53e3\u4f1a\u53ca\u5176\u5e9e\u5927\uff0c\u800c\u4e14\u96be\u4ee5\u7ef4\u62a4\uff1b\u8fd9\u65f6\u5019\u5f15\u51fa\u7684\u601d\u8003\u95ee\u9898\u662f \u201c\u80fd\u4e0d\u80fd\u4f7f\u7528 Nginx \u5565\u7684\u53ea\u76d1\u542c\u4e00\u4e2a\u7aef\u53e3\uff0c\u6bd4\u5982 80\uff0c\u7136\u540e\u6309\u7167\u57df\u540d\u5411\u540e\u8f6c\u53d1\uff1f\u201d \u8fd9\u601d\u8def\u5f88\u597d\uff0c\u7b80\u5355\u7684\u5b9e\u73b0\u5c31\u662f\u4f7f\u7528 DaemonSet \u5728\u6bcf\u4e2a node \u4e0a\u76d1\u542c 80\uff0c\u7136\u540e\u5199\u597d\u89c4\u5219\uff0c\u56e0\u4e3a Nginx \u5916\u9762\u7ed1\u5b9a\u4e86\u5bbf\u4e3b\u673a 80 \u7aef\u53e3(\u5c31\u50cf NodePort)\uff0c\u672c\u8eab\u53c8\u5728\u96c6\u7fa4\u5185\uff0c\u90a3\u4e48\u5411\u540e\u76f4\u63a5\u8f6c\u53d1\u5230\u76f8\u5e94 Service IP \u5c31\u884c\u4e86\uff0c\u5982\u4e0b\u56fe\u6240\u793a<\/p>\n<p><img decoding=\"async\" src=\"\/\/www.ipcpu.com\/wp-content\/uploads\/2018\/06\/8044b32f-3273-4228-852b-c988c66d01aa.jpg\" style=\"vertical-align: bottom; max-width: 100%;\"><\/p>\n<p>\u4ece\u4e0a\u9762\u7684\u601d\u8def\uff0c\u91c7\u7528 Nginx \u4f3c\u4e4e\u5df2\u7ecf\u89e3\u51b3\u4e86\u95ee\u9898\uff0c\u4f46\u662f\u5176\u5b9e\u8fd9\u91cc\u9762\u6709\u4e00\u4e2a\u5f88\u5927\u7f3a\u9677\uff1a\u6bcf\u6b21\u6709\u65b0\u670d\u52a1\u52a0\u5165\u600e\u4e48\u6539 Nginx \u914d\u7f6e\uff1f\u603b\u4e0d\u80fd\u624b\u52a8\u6539\u6216\u8005\u6765\u4e2a Rolling Update \u524d\u7aef Nginx Pod \u5427\uff1f\u8fd9\u65f6\u5019 \u201c\u4f1f\u5927\u800c\u53c8\u6b63\u76f4\u52c7\u6562\u7684\u201d Ingress \u767b\u573a\uff0c\u5982\u679c\u4e0d\u7b97\u4e0a\u9762\u7684 Nginx\uff0cIngress \u53ea\u6709\u4e24\u5927\u7ec4\u4ef6\uff1aIngress Controller \u548c Ingress<\/p>\n<p>Ingress \u8fd9\u4e2a\u73a9\u610f\uff0c\u7b80\u5355\u7684\u7406\u89e3\u5c31\u662f \u4f60\u539f\u6765\u8981\u6539 Nginx \u914d\u7f6e\uff0c\u7136\u540e\u914d\u7f6e\u5404\u79cd\u57df\u540d\u5bf9\u5e94\u54ea\u4e2a Service\uff0c\u73b0\u5728\u628a\u8fd9\u4e2a\u52a8\u4f5c\u62bd\u8c61\u51fa\u6765\uff0c\u53d8\u6210\u4e00\u4e2a Ingress \u5bf9\u8c61\uff0c\u4f60\u53ef\u4ee5\u7528 yml \u521b\u5efa\uff0c\u6bcf\u6b21\u4e0d\u8981\u53bb\u6539 Nginx \u4e86\uff0c\u76f4\u63a5\u6539 yml \u7136\u540e\u521b\u5efa\/\u66f4\u65b0\u5c31\u884c\u4e86\uff1b\u90a3\u4e48\u95ee\u9898\u6765\u4e86\uff1a\u201dNginx \u548b\u6574\uff1f\u201d<\/p>\n<p>Ingress Controller \u8fd9\u4e1c\u897f\u5c31\u662f\u89e3\u51b3 \u201cNginx \u548b\u6574\u201d \u7684\uff1bIngress Controoler \u901a\u8fc7\u4e0e Kubernetes API \u4ea4\u4e92\uff0c\u52a8\u6001\u7684\u53bb\u611f\u77e5\u96c6\u7fa4\u4e2d Ingress \u89c4\u5219\u53d8\u5316\uff0c\u7136\u540e\u8bfb\u53d6\u4ed6\uff0c\u6309\u7167\u4ed6\u81ea\u5df1\u6a21\u677f\u751f\u6210\u4e00\u6bb5 Nginx \u914d\u7f6e\uff0c\u518d\u5199\u5230 Nginx Pod \u91cc\uff0c\u6700\u540e reload \u4e00\u4e0b\uff0c\u5de5\u4f5c\u6d41\u7a0b\u5982\u4e0b\u56fe<\/p>\n<p><img decoding=\"async\" src=\"\/\/www.ipcpu.com\/wp-content\/uploads\/2018\/06\/6d74e5208c284be59692e71c15b53693_b0daab69-43d5-4866-b6fe-f46945d3e994.jpg\" style=\"vertical-align: bottom; max-width: 100%;\"><\/p>\n<p>\u5f53\u7136\u5728\u5b9e\u9645\u5e94\u7528\u4e2d\uff0c\u6700\u65b0\u7248\u672c Kubernetes \u5df2\u7ecf\u5c06 Nginx \u4e0e Ingress Controller \u5408\u5e76\u4e3a\u4e00\u4e2a\u7ec4\u4ef6\uff0c\u6240\u4ee5 Nginx \u65e0\u9700\u5355\u72ec\u90e8\u7f72\uff0c\u53ea\u9700\u8981\u90e8\u7f72 Ingress Controller \u5373\u53ef<\/p>\n<h2 id=\"\u4e8c\u3001\u90e8\u7f72NginxIngressController\">\u4e8c\u3001\u90e8\u7f72Nginx Ingress Controller<\/h2>\n<p>\u5efa\u8bae\u4f7f\u7528DaemonSet\u65b9\u5f0f\u90e8\u7f72<\/p>\n<p>\u5b98\u65b9\u7ed9\u51fa\u7684\u914d\u7f6e\u6587\u4ef6\u5728 <a href=\"https:\/\/github.com\/kubernetes\/ingress-nginx\/tree\/master\/deploy\">https:\/\/github.com\/kubernetes\/ingress-nginx\/tree\/master\/deploy<\/a><\/p>\n<p>\u6211\u7684kubernetes\u96c6\u7fa4\u662f1.5\u7684\u7248\u672c\uff0c\u4ee5\u4e0b\u662f\u6211\u7684\u914d\u7f6e\u6587\u4ef6<\/p>\n<div>\n<pre><code>---\r\napiVersion: v1\r\nkind: ServiceAccount\r\nmetadata:\r\n  name: nginx-ingress-serviceaccount\r\n---\r\napiVersion: extensions\/v1beta1\r\nkind: DaemonSet\r\nmetadata:\r\n  name: nginx-ingress-lb\r\nspec:\r\n  template:\r\n    metadata:\r\n      labels:\r\n        name: nginx-ingress-lb\r\n    spec:\r\n      serviceAccountName: nginx-ingress-serviceaccount\r\n      terminationGracePeriodSeconds: 60\r\n      hostNetwork: true\r\n      containers:\r\n      - image: 47.52.174.242:5000\/google_containers\/nginx-ingress-controller:0.8.3\r\n        name: nginx-ingress-lb\r\n        imagePullPolicy: IfNotPresent\r\n        securityContext:\r\n          privileged: true\r\n        # use downward API\r\n        ports:\r\n        - containerPort: 80\r\n          hostPort: 80\r\n        - containerPort: 443\r\n          hostPort: 443\r\n        livenessProbe:\r\n          failureThreshold: 3\r\n          httpGet:\r\n            path: \/healthz\r\n            port: 10254\r\n            scheme: HTTP\r\n          initialDelaySeconds: 10\r\n          periodSeconds: 10\r\n          successThreshold: 1\r\n          timeoutSeconds: 1\r\n        readinessProbe:\r\n          failureThreshold: 3\r\n          httpGet:\r\n            path: \/healthz\r\n            port: 10254\r\n            scheme: HTTP\r\n          periodSeconds: 10\r\n          successThreshold: 1\r\n          timeoutSeconds: 1\r\n        env:\r\n          - name: POD_NAME\r\n            valueFrom:\r\n              fieldRef:\r\n                fieldPath: metadata.name\r\n          - name: POD_NAMESPACE\r\n            valueFrom:\r\n              fieldRef:\r\n                fieldPath: metadata.namespace\r\n        args:\r\n        - \/nginx-ingress-controller\r\n        - --default-backend-service=default\/svc-nginx<\/code><\/pre>\n<\/div>\n<p>\u77e5\u5f97\u6ce8\u610f\u7684\u4ee5\u4e0b\u51e0\u70b9\uff1a<\/p>\n<blockquote>\n<ol class=\"wiz-list-level1\">\n<li>\u8fd9\u91cc\u9762\u9700\u8981\u4f7f\u7528ServiceAccount\uff0c\u5426\u5219Pod\u4f1a\u62a5\u9519\u65e0\u6cd5\u8fde\u63a5APIServer<\/li>\n<li>\u4f7f\u7528hostNetwork\u548chostPort\u76f4\u63a5\u76d1\u542cNode\u670d\u52a1\u5668\u4e0a\u7684\u7aef\u53e3\u3002<\/li>\n<li>\u521b\u5efaNginx Ingress Controller\u4e4b\u524d\u5fc5\u987b\u6709\u4e00\u4e2a\u9ed8\u8ba4\u540e\u7aefdefault backend\uff0c\u968f\u4fbf\u627e\u4e2anginx\u653e\u4e0a\u5c31\u597d\uff0c\u9700\u8981\u521b\u5efa\u597dservice\u3002<\/li>\n<\/ol>\n<\/blockquote>\n<h2 id=\"\u4e09\u3001\u521b\u5efaingress\">\u4e09\u3001\u521b\u5efaingress<\/h2>\n<p>\u8fd9\u91cc\u6211\u501f\u7528\u4e86traefik\u7684\u6848\u4f8b <a href=\"https:\/\/github.com\/containous\/traefik\/tree\/master\/examples\/k8s\">https:\/\/github.com\/containous\/traefik\/tree\/master\/examples\/k8s<\/a><\/p>\n<p>\u9700\u8981\u73b0\u90e8\u7f723\u4e2a\u670d\u52a1stilton\uff0ccheddar\u548cwensleydale\uff0c\u7136\u540e\u518d\u57fa\u4e8e\u865a\u62df\u4e3b\u673a\u521b\u5efaingress<\/p>\n<div>\n<pre><code>apiVersion: extensions\/v1beta1\r\nkind: Ingress\r\nmetadata:\r\n  name: cheese\r\nspec:\r\n  rules:\r\n  - host: stilton.minikube\r\n    http:\r\n      paths:\r\n      - path: \/\r\n        backend:\r\n          serviceName: stilton\r\n          servicePort: http\r\n  - host: cheddar.minikube\r\n    http:\r\n      paths:\r\n      - path: \/\r\n        backend:\r\n          serviceName: cheddar\r\n          servicePort: http\r\n  - host: wensleydale.minikube\r\n    http:\r\n      paths:\r\n      - path: \/\r\n        backend:\r\n          serviceName: wensleydale\r\n          servicePort: http\r\n<\/code><\/pre>\n<\/div>\n<h2 id=\"\u56db\u3001\u6d4b\u8bd5\">\u56db\u3001\u6d4b\u8bd5<\/h2>\n<div>\n<pre><code>[root@k80 k8s]# curl http:\/\/cheddar.minikube\/ -x 10.130.8.25:80\r\n&lt;html&gt;\r\n...\r\n  &lt;body&gt;\r\n    &lt;h1&gt;Cheddar&lt;\/h1&gt;\r\n  &lt;\/body&gt;\r\n&lt;\/html&gt;\r\n[root@k80 k8s]# curl http:\/\/wensleydale.minikube\/ -x 10.130.8.25:80\r\n&lt;html&gt;\r\n...\r\n  &lt;body&gt;\r\n    &lt;h1&gt;Wensleydale&lt;\/h1&gt;\r\n  &lt;\/body&gt;\r\n&lt;\/html&gt;\r\n<\/code><\/pre>\n<\/div>\n<p>\u901a\u8fc7\u6307\u5b9a\u4e0d\u540c\u7684\u57df\u540d\uff0c\u663e\u793a\u51fa\u4e0d\u540c\u7684\u5185\u5bb9\u3002<\/p>\n<h2 id=\"\u4e94\u3001\u4e1a\u52a1\u72b6\u6001\u5065\u5eb7\u68c0\u67e5\">\u4e94\u3001\u4e1a\u52a1\u72b6\u6001\u5065\u5eb7\u68c0\u67e5<\/h2>\n<p>Nginx Ingress Controller \u9700\u8981\u914d\u7f6elivenessProbe\u548creadinessProbe\u3002<\/p>\n<p>Service\u548cIngress\u6ca1\u6709\u5065\u5eb7\u68c0\u67e5\u529f\u80fd\u3002<\/p>\n<p>\u63d0\u4f9b\u670d\u52a1\u7684Pod\u6216\u8005Deployment\u4e5f\u53ef\u4ee5\u901a\u8fc7livenessProbe\u548creadinessProbe\u6765\u8fdb\u884c\u5065\u5eb7\u68c0\u67e5\u3002<\/p>\n<h2 id=\"\u516d\u3001HTTPS\u7684\u914d\u7f6e\">\u516d\u3001HTTPS\u7684\u914d\u7f6e<\/h2>\n<p>\u968f\u7740https\u7ad9\u70b9\u7684\u666e\u53ca\uff0c\u652f\u6301https\u7ad9\u70b9\u4e5f\u662f\u5fc5\u987b\u7684\uff0c\u63a5\u4e0b\u6765\u6211\u4eec\u7ed9nginx\u914d\u7f6e\u8bc1\u4e66\uff1a<\/p>\n<p>\u9996\u5148\u6211\u4eec\u9700\u8981\u5c06\u6211\u4eec\u7684\u8bc1\u4e66\u6587\u4ef6\u8f6c\u6362\u4e3aK8S\u4e2d\u7684Secret\u3002<\/p>\n<div>\n<pre><code>kubectl create secret tls ipcpu.tls --key server.key --cert server.pem<\/code><\/pre>\n<\/div>\n<p>\u7136\u540e\u521b\u5efa\u652f\u6301https\u7684Ingress\uff1a<\/p>\n<div>\n<pre><code>cat &lt;&lt;EOF | kubectl create -f - \r\napiVersion: extensions\/v1beta1\r\nkind: Ingress\r\nmetadata:\r\n  name: tls-fanout\r\nspec:\r\n  tls:\r\n  - hosts:\r\n    - foo.ipcpu.com.cn\r\n    secretName: ipcpu.tls\r\n  rules:\r\n  - host: foo.ipcpu.com.cn\r\n    http:\r\n      paths:\r\n      - path: \/\r\n        backend:\r\n          serviceName: wensleydale\r\n          servicePort: 80\r\nEOF<\/code><\/pre>\n<\/div>\n<p>\u7136\u540e\u6d4b\u8bd5<\/p>\n<div>\n<pre><code>[root@k80 nginx-ingress]# cat &lt;&lt;EOF &gt;&gt;\/etc\/hosts\r\n&gt; 10.130.8.25          foo.ipcpu.com.cn\r\n&gt; EOF\r\n[root@k80 nginx-ingress]# curl -I https:\/\/foo.ipcpu.com.cn\r\nHTTP\/1.1 200 OK\r\nServer: nginx\/1.11.3\r\nContent-Type: text\/html\r\nContent-Length: 521<\/code><\/pre>\n<\/div>\n<h2 id=\"\u4e03\u3001\u53c2\u8003\u8d44\u6599\">\u4e03\u3001\u53c2\u8003\u8d44\u6599<\/h2>\n<p><a href=\"https:\/\/mritd.me\/2017\/03\/04\/how-to-use-nginx-ingress\/\">https:\/\/mritd.me\/2017\/03\/04\/how-to-use-nginx-ingress\/<\/a> <br \/>\n<a href=\"http:\/\/blog.opskumu.com\/k8s-ingress.html\">http:\/\/blog.opskumu.com\/k8s-ingress.html<\/a> <br \/>\n<a href=\"http:\/\/www.jianshu.com\/p\/8afb493dc4eb\">http:\/\/www.jianshu.com\/p\/8afb493dc4eb<\/a> <br \/>\n<a href=\"https:\/\/my.oschina.net\/jxcdwangtao\/blog\/1523812\">https:\/\/my.oschina.net\/jxcdwangtao\/blog\/1523812<\/a> <br \/>\n<a href=\"https:\/\/github.com\/kubernetes\/ingress-nginx\/\">https:\/\/github.com\/kubernetes\/ingress-nginx\/<\/a> <br \/>\n<a href=\"https:\/\/help.aliyun.com\/document_detail\/53770.html?spm=5176.doc56336.6.826.YOsGbq\">https:\/\/help.aliyun.com\/document_detail\/53770.html?spm=5176.doc56336.6.826.YOsGbq<\/a><\/p>\n<p><wiz_tmp_tag id=\"wiz-table-range-border\" contenteditable=\"false\" style=\"display: none;\"><\/p>\n<div id=\"wiz-table-col-line\" style=\"display: none;\"><\/div>\n<div id=\"wiz-table-row-line\" style=\"display: none;\"><\/div>\n<div id=\"wiz-table-range-border_start\" style=\"display: none;\">\n<div id=\"wiz-table-range-border_start_top\"><\/div>\n<div id=\"wiz-table-range-border_start_right\"><\/div>\n<div id=\"wiz-table-range-border_start_bottom\"><\/div>\n<div id=\"wiz-table-range-border_start_left\"><\/div>\n<div id=\"wiz-table-range-border_start_dot\"><\/div>\n<\/div>\n<div id=\"wiz-table-range-border_range\" style=\"display: none;\">\n<div id=\"wiz-table-range-border_range_top\"><\/div>\n<div id=\"wiz-table-range-border_range_right\"><\/div>\n<div id=\"wiz-table-range-border_range_bottom\"><\/div>\n<div id=\"wiz-table-range-border_range_left\"><\/div>\n<div id=\"wiz-table-range-border_range_dot\"><\/div>\n<\/div>\n<p><\/wiz_tmp_tag><\/p>\n<p>\u8f6c\u8f7d\u8bf7\u6ce8\u660e\uff1a<a href=\"https:\/\/c.ipcpu.com\">IPCPU-\u7f51\u7edc\u4e4b\u8def<\/a> &raquo; <a href=\"https:\/\/c.ipcpu.com\/2018\/01\/kubernetes-nginx-ingress\/\">Kubernetes Nginx Ingress \u6559\u7a0b<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Kubernetes Nginx Ingress \u6559\u7a0b.md \u4e00\u3001Ingress \u4ecb\u7ecd Kubernetes \u66b4\u9732\u670d\u52a1\u7684\u65b9\u5f0f\u76ee\u524d\u53ea\u6709\u4e09\u79cd\uff1aLoadBlancer Service\u3001NodePort Service\u3001Ingress\uff1b Ingress \u662f\u4ec0\u4e48\uff1f \u4f17\u6240\u5468\u77e5 Kubernetes \u5177\u6709\u5f3a\u5927\u7684\u526f\u672c\u63a7\u5236\u80fd\u529b\uff0c\u80fd\u4fdd\u8bc1\u5728\u4efb\u610f\u526f\u672c(Pod)\u6302\u6389\u65f6\u81ea\u52a8\u4ece\u5176\u4ed6\u673a\u5668\u542f\u52a8\u4e00\u4e2a\u65b0\u7684\uff0c\u8fd8\u53ef\u4ee5\u52a8\u6001\u6269\u5bb9\u7b49\uff0c\u603b\u4e4b\u4e00\u53e5\u8bdd\uff0c\u8fd9\u4e2a Pod \u53ef\u80fd\u5728\u4efb\u4f55\u65f6\u523b\u51fa\u73b0\u5728\u4efb\u4f55\u8282\u70b9\u4e0a\uff0c\u4e5f\u53ef\u80fd\u5728\u4efb\u4f55\u65f6\u523b\u6b7b\u5728\u4efb\u4f55\u8282\u70b9\u4e0a\uff1b\u90a3\u4e48\u81ea\u7136\u968f\u7740 Pod \u7684\u521b\u5efa\u548c\u9500\u6bc1\uff0cPod IP \u80af\u5b9a\u4f1a\u52a8\u6001\u53d8\u5316\uff1b\u90a3\u4e48\u5982\u4f55\u628a\u8fd9\u4e2a\u52a8\u6001\u7684 Pod IP \u66b4\u9732\u51fa\u53bb\uff1f \u501f\u52a9\u4e8e Kubernetes \u7684 Service \u673a\u5236\uff0cService \u53ef\u4ee5\u4ee5\u6807\u7b7e\u7684\u5f62\u5f0f\u9009\u5b9a\u4e00\u7ec4\u5e26\u6709\u6307\u5b9a\u6807\u7b7e\u7684 Pod\uff0c\u5e76\u76d1\u63a7\u548c\u81ea\u52a8\u8d1f\u8f7d\u4ed6\u4eec\u7684 Pod IP\uff0c\u90a3\u4e48\u6211\u4eec\u5411\u5916\u66b4\u9732\u53ea\u66b4\u9732 Service IP \u5c31\u884c\u4e86\uff1b\u8fd9\u5c31\u662f NodePort \u6a21\u5f0f\uff1a\u5373\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u5f00\u8d77\u4e00\u4e2a\u7aef\u53e3\uff0c\u7136\u540e\u8f6c\u53d1\u5230\u5185\u90e8 Service IP \u4e0a\uff0c\u5982\u4e0b\u56fe\u6240\u793aNodePort \u91c7\u7528 NodePort \u65b9\u5f0f\u66b4\u9732\u670d\u52a1\u9762\u4e34\u4e00\u4e2a\u5751\u7239\u7684\u95ee\u9898\u662f\uff0c\u670d\u52a1\u4e00\u65e6\u591a\u8d77\u6765\uff0cNodePort \u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u5f00\u542f\u7684\u7aef\u53e3\u4f1a\u53ca\u5176\u5e9e\u5927\uff0c\u800c\u4e14\u96be\u4ee5\u7ef4\u62a4\uff1b\u8fd9\u65f6\u5019\u5f15\u51fa\u7684\u601d\u8003\u95ee\u9898\u662f \u201c\u80fd\u4e0d\u80fd\u4f7f\u7528 Nginx \u5565\u7684\u53ea\u76d1\u542c\u4e00\u4e2a\u7aef\u53e3\uff0c\u6bd4\u5982 80\uff0c\u7136\u540e\u6309\u7167\u57df\u540d\u5411\u540e\u8f6c\u53d1\uff1f\u201d \u8fd9\u601d\u8def\u5f88\u597d\uff0c\u7b80\u5355\u7684\u5b9e\u73b0\u5c31\u662f\u4f7f\u7528 DaemonSet \u5728\u6bcf\u4e2a node \u4e0a\u76d1\u542c 80\uff0c\u7136\u540e\u5199\u597d\u89c4\u5219\uff0c\u56e0\u4e3a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[13],"tags":[175,173,129,146,14,125,127],"_links":{"self":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/1044"}],"collection":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/comments?post=1044"}],"version-history":[{"count":3,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/1044\/revisions"}],"predecessor-version":[{"id":1049,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/posts\/1044\/revisions\/1049"}],"wp:attachment":[{"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/media?parent=1044"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/categories?post=1044"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/c.ipcpu.com\/wp-json\/wp\/v2\/tags?post=1044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}