k8s是否支持https活跃度和readness探测

Question

我的应用基于express node框架，以https cert开头。那么k8s支持https活跃度探测吗？架构为HTTPS。我认为活动探测是通过IP地址发送请求，而不是通过域。所以看起来HTTPS模式实际上不起作用。

      livenessProbe:
        httpGet:
          path: /api/alive
          port: 8433
          scheme: HTTPS

Answer 1

是的，确实如此。同时支持HTTP和HTTPS。请参见下面的示例

apiVersion: v1
kind: Pod
metadata:
  labels:
    test: liveness
  name: liveness-http
spec:
  containers:
  - args:
    - /server
    image: k8s.gcr.io/liveness
    livenessProbe:
      httpGet:
        # when "host" is not defined, "PodIP" will be used
        # host: my-host
        # when "scheme" is not defined, "HTTP" scheme will be used. Only "HTTP" and "HTTPS" are allowed
        # scheme: HTTPS
        path: /healthz
        port: 8080
        httpHeaders:
        - name: X-Custom-Header
          value: Awesome
      initialDelaySeconds: 15
      timeoutSeconds: 1
    name: liveness

注意，如果方案字段设置为HTTPS，则kubelet向指定路径(路径: /healthz)和端口(端口: 8080 )发送HTTPS请求，以执行跳过证书验证的检查