我遇到了大使(特使)的问题。大使不能同时支持HTTP和HTTPS。因此,作为一种解决办法,我必须部署两组大使(一组用于HTTP,另一组用于HTTPS)。我已经部署了两组大使。
NAME READY STATUS RESTARTS AGE
pod/ambassador-k7nlr 2/2 Running 0 55m
pod/ambassador-t2dbm 2/2 Running 0 55m
pod/ambassador-tls-7h6td 2/2 Running 0 107s
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/ambassador-admin NodePort 10.233.58.170 <none> 8877:30857/TCP 18d
service/ambassador-admin-tls NodePort 10.233.33.29 <none> 8878:32339/TCP 28m
service/ambassador-monitor ClusterIP None <none> 9102/TCP 18d
NAME DESIRED CURRENT READY UP-TO-DATE AVAILABLE NODE SELECTOR AGE
daemonset.apps/ambassador 2 2 2 2 2 node-role.kubernetes.io/node= 58m
daemonset.apps/ambassador-tls 1 1 1 1 1 node-role.kubernetes.io/node=tls 107s下面是我想要用于http的两组pod
pod/ambassador-k7nlr 2/2 Running 0 55m
pod/ambassador-t2dbm 2/2 Running 0 55m这个是用于https的
pod/ambassador-tls-7h6td 2/2 Running 0 107s下面是我的服务注释
getambassador.io/config: |
---
apiVersion: ambassador/v0
kind: Module
name: tls
config:
server:
secret: dashboard-certs
---
apiVersion: ambassador/v0
kind: Mapping
name: dashboard_test_mapping
host: dashboard.example.com
service: https://dashboard.test.svc.cluster.local
prefix: /这里的apiVersion: ambassador/v0指的是两个大使集,所以我在服务注释中所做的任何更改都将反映在两个大使集中。
我想为特定的大使守护进程(HTTPS)设置此服务注释。
有什么建议吗?
发布于 2019-05-14 19:58:14
为此,您可以使用AMBASSADOR_ID,如下所示:
getambassador.io/config: |
---
ambassador_id: ambassador-1
apiVersion: ambassador/v0
kind: Module
name: tls
config:
server:
secret: dashboard-certs
---
ambassador_id: ambassador-1
apiVersion: ambassador/v0
kind: Mapping
name: dashboard_test_mapping
host: dashboard.example.com
service: https://dashboard.test.svc.cluster.local
prefix: /然后在DaemonSet的环境变量中指定此id:
env:
- name: AMBASSADOR_ID
value: ambassador-1请参阅文档:https://www.getambassador.io/reference/running/#ambassador_id
https://stackoverflow.com/questions/56129026
复制相似问题