写的比较简略主要用于个人记录
image.png
image.png
image.png
image.png
image.png
1-下载nginx证书
2-配置Service: 编辑 ClusterIP nginx
3-
apiVersion: v1
data:
tls.crt: xxx=证书-pem
tls.key: xxx==key
kind: Secret
metadata:
managedFields:
- apiVersion: v1
fieldsType: FieldsV1
fieldsV1:
f:data:
.: {}
f:tls.crt: {}
f:tls.key: {}
f:type: {}
manager: agent
operation: Update
name: nginx
namespace: default
type: kubernetes.io/tls
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations: {}
managedFields:
- apiVersion: networking.k8s.io/v1
fieldsType: FieldsV1
fieldsV1:
'f:spec':
'f:rules': {}
'f:tls': {}
manager: agent
operation: Update
- apiVersion: networking.k8s.io/v1beta1
fieldsType: FieldsV1
fieldsV1:
'f:status':
'f:loadBalancer':
'f:ingress': {}
manager: nginx-ingress-controller
operation: Update
- apiVersion: extensions/v1beta1
fieldsType: FieldsV1
fieldsV1:
'f:metadata':
'f:annotations':
.: {}
'f:field.cattle.io/publicEndpoints': {}
manager: rancher
operation: Update
name: ''
namespace: default
spec:
rules:
- host: xxxx.com
http:
paths:
- backend:
service:
name: nginx001
port:
number: 80
path: /
pathType: Prefix
tls:
- hosts:
-xxx.com
secretName: nginx
完成证书认证
配置nfs-存储
image.png
└──╼ #cat ngx001.yml
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx001
namespace: default
spec:
replicas: 2
selector:
matchLabels:
workload.user.cattle.io/workloadselector: deployment-default-nginx001
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
creationTimestamp: null
labels:
run: nginx001
workload.user.cattle.io/workloadselector: deployment-default-nginx001
spec:
containers:
- image: nginx
imagePullPolicy: Never
name: nginx001
ports:
- containerPort: 78
protocol: TCP
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /usr/share/nginx/html
name: nfs001
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds: 30
volumes:
- name: nfs001
nfs:
path: /nfsaa/nginx
server: 10.0.0.100
image.png
