Wani API mai zaman kansa yana amsawa daga kwamfutar tafi-da-gidanka kuma Pod a cikin minikube ba ya iya isa gare shi. Kafin ka canza wani abu a kan mai masauki, ambaci direban da ke bayan bayanin da ke aiki, domin wannan gaskiya daya ce ke kayyade daga wace cibiya bukatar ke fita a zahiri. Sannan gwada wannan endpoint daga mai masauki, daga node da daga Pod. Daya ne kawai daga cikin wadannan uku abin da ya gaza, kuma kuskuren zato yana bata rana.

Mataki 0: ambaci direban da tushen

Tambayi minikube wane bayani ne ke aiki da yadda yake gudana. Direban kwantena yana sanya node a cikin kwantena a kan injinka, direban VM yana sanya shi a cikin injin kama-da-wane, kuma direban nesa yana sanya shi wani wuri daban gaba daya.

minikube profile list
minikube status
kubectl config current-context

Daga nan, rubuta inda bukatar ta samo asali. Amsar tana kayyade resolver na wane da wadanne hanyoyi ne suka dace, kuma ba koyaushe na mai masauki ba ne. Bayanai biyu a kan kwamfuta daya na iya yin daban-daban gaba daya ga URL daya.

ContextWhat has to work
Host processHost resolver and host route to the private destination
minikube nodeThe node's own resolver and its outbound path
PodPod DNS through cluster services plus the cluster network path

Mataki 1: gwada wannan endpoint sau uku

Yi amfani da endpoint daya marar lahani kuma ka rike sunan mai masauki, tashar da dangin adireshi iri daya a duk gwaje-gwaje uku. Idan ka canza daya daga cikinsu tsakanin gudanarwa, sakamakon ba zai zama mai kwatantawa ba.

curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health
minikube ssh -- curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health
kubectl run probe --rm -it --image=curlimages/curl --restart=Never -- \
  curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health

Ciro image cikin nasara da node ya yi ba ya tabbatar da komai game da warware sunaye ga mai masauki mai zaman kansa. Bukatar jama'a da ta yi nasara tana tabbatar da kasa da haka. Ka raba sakamakon bisa ga mahalli, domin tsari a cikin layuka uku bincike ne kuma gazawar daya alama ce.

Idan layin mai masauki ma ya gaza, tsaya. Kana da matsalar cibiyar sadarwa ta mai masauki kuma gungu dan bata hankali ne.

Mataki 2: kiyaye hanyar mai masauki zuwa gungu

Akwai wata hanya ta biyu da mutane ke mantawa: dole mai masauki ya ci gaba da isa ga API da ayyukan gungun kansa. Abokin ciniki na VPN zai iya sanya hanyoyin da ke fafatawa da prefixes da minikube ke amfani da su don cibiyar sadarwar node, kewayon sabis da kewayon pod dinsa.

Idan hakan ta faru, alamar tana rikitarwa, domin rami yana aiki kuma kubectl ya daina amsawa ko NodePort ya ki hadi. Yana kama da kuskuren gungu kuma kuskuren tafiyar da kwamfutar tafi-da-gidanka ne.

Duba teburin tafiyar da mai masauki da kewayon minikube kafin ka zargi ramin da wani abu daban. Haduwar tana bayyana yawanci a matsayin hanya mafi kayyadaddun da ke nuna ga makallan rami don prefix da gungu yake tsammanin nasa ne.

Mataki 3: warware haduwar ba tare da kashe VPN ba

Littafin jagora na VPN da proxy na minikube da kansa yana tattauna wadannan rikice-rikice kuma yana daukar kewayon misalinsa a matsayin abubuwan da za a bincika, ba jerin duniya ba. Karanta shi tare da bayanin da kake da shi a zahiri.

Inda akwai haduwa ta gaske, amsar da aka goyi bayan ita ce kewayon da ba ya haduwa ko manufar shiga cikin gida da aka yi da gangan wadda mai VPN ya amince da ita. Canza kewayon sabis ba daya ba ne da canza kewayon pod, kuma babu dayan da ya yi daidai da canza cibiyar sadarwar node.

Kashe ramin kamfani don gungu na gida ya yi aiki ba hanya ce ta kaucewa ba; shawara ce ta manufa wadda wani ya kamata ya yanke. Kai ta ga wannan mutumin maimakon yin ta a hankali bayan kowa ya tafi gida. Idan ka riga ka yi, mayar da ita kafin ka tambaya.

Mataki 4: raba proxy, DNS da sifofin gazawa hudu

Idan ana bukatar proxy, gano wane mahalli ne yake bukatarsa. Saitin burauza a kan mai masauki ba ya saita tsari a cikin node, kuma Pod yana bukatar masu canjin muhalli ko saitin proxy na matakin gungu.

Sannan rarraba gazawar maimakon kwatanta ta. Sunan da ba ya warwarewa DNS ne. Sunan da ya warware kuma ya ki hadi tafiyar da hanya ce ko listener. Hadin da ya kafa kuma ya gaza a kan ainihi TLS ne. Hadin da ya yi nasara tare da jikin kuskure ita ce aikace-aikacen.

Kowanne daga cikin wadannan hudu yana cikin gyara daban, kuma daya ne kawai game da VPN. Rubuta wanda ka lura da shi a kowanne mahalli, kuma na gaba zai gaji hujja maimakon labari.

Labarai masu alaƙa