- 1、准备下面的配置文件，将该配置保存为文件名为：
nginx.conf的文件
/etc/nginx/certs/fullchain.pem 中的 /etc/nginx/certs/路径可以随便定义，目前没有什么其他的依赖，会在部署Nginx服务（Kind:Deployment）过程中通过挂载设置的方式指向 该处
worker_processes auto;
events {
worker_connections 1024;
}
http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 4096;
default_type application/octet-stream;
server {
listen 443 ssl;
server_name www.siquanzhuanxiang.top siquanzhuanxiang.top;
ssl_certificate /etc/nginx/certs/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/key.pem;
root /usr/share/nginx/html;
error_page 404 /404.html;
location = /404.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:83;
}
location /lark {
# 保留代理之前的host 包含客户端真实的域名和端口号
proxy_set_header Host $host;
# 保留代理之前的真实客户端ip
proxy_set_header X-Real-IP $remote_addr;
# 这个Header和X-Real-IP类似，但它在多级代理时会包含真实客户端及中间每个代理服务器的IP
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# 表示客户端真实的协议（http还是https）
proxy_set_header X-Forwarded-Proto $scheme;
# 指定修改被代理服务器返回的响应头中的location头域跟refresh头域数值
# 如果使用"default"参数，将根据location和proxy_pass参数的设置来决定。
# proxy_redirect [ default|off|redirect replacement ];
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:84;
}
location /dappradar {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:87;
}
location /similarweb {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:88;
}
}
server {
listen 443 ssl;
server_name kibana.siquanzhuanxiang.top;
location / {
proxy_pass http://kibana.default.svc.cluster.local:5601;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
server {
listen 443 ssl;
server_name k8s.siquanzhuanxiang.top;
location / {
proxy_pass https://kubernetes-dashboard.kubernetes-dashboard.svc.cluster.local:443;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
}
路由地址解析 https://kubernetes-dashboard.kubernetes-dashboard.svc.cluster.local:443
表示：https://servicename.namespace.svc.cluster.local:暴露在命名空间内的端口
- 2、基于原始配置文件，在配置文件的目录执行下面的命令
kubectl create configmap nginx-config --from-file=nginx.conf
- 3、configmap格式化（第二步命令执行后的结果）
转发地址是通过服务名和命名空间、端口号进行拼接
kind: ConfigMap
apiVersion: v1
metadata:
name: nginx-config
namespace: default
data:
nginx.conf: |
worker_processes auto;
events {
worker_connections 1024;
}
http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 4096;
default_type application/octet-stream;
server {
listen 443 ssl;
server_name www.siquanzhuanxiang.top siquanzhuanxiang.top;
ssl_certificate /etc/nginx/certs/fullchain.pem;
ssl_certificate_key /etc/nginx/certs/key.pem;
root /usr/share/nginx/html;
error_page 404 /404.html;
location = /404.html {
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:83;
}
location /lark {
# 保留代理之前的host 包含客户端真实的域名和端口号
proxy_set_header Host $host;
# 保留代理之前的真实客户端ip
proxy_set_header X-Real-IP $remote_addr;
# 这个Header和X-Real-IP类似，但它在多级代理时会包含真实客户端及中间每个代理服务器的IP
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# 表示客户端真实的协议（http还是https）
proxy_set_header X-Forwarded-Proto $scheme;
# 指定修改被代理服务器返回的响应头中的location头域跟refresh头域数值
# 如果使用"default"参数，将根据location和proxy_pass参数的设置来决定。
# proxy_redirect [ default|off|redirect replacement ];
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:84;
}
location /dappradar {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:87;
}
location /similarweb {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect off;
proxy_pass http://spiders-service.default.svc.cluster.local:88;
}
}
server {
listen 443 ssl;
server_name kibana.siquanzhuanxiang.top;
location / {
proxy_pass http://kibana.default.svc.cluster.local:5601;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
server {
listen 443 ssl;
server_name k8s.siquanzhuanxiang.top;
location / {
proxy_pass https://kubernetes-dashboard.kubernetes-dashboard.svc.cluster.local:443;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
}
- 4、修改配置文件（可选）
- 一共有两种方式，二选一
- 1、通过K8s dashboard面板进行修改
- 2、通过命令kubectl edit cm nginx-config 进行修改
- 一共有两种方式，二选一
