minikube ma gaari karo API gaar ah? Marka hore hubi darawalka
Martigeliyaha, noodhka iyo Pod mid kastaa wuxuu leeyahay waddooyin iyo resolver u gaar ah. Magacow darawalka, tijaabi isla endpoint-ka saddexda, kadib hagaaji macnaha guuldaraystay.
API gaar ah ayaa ka jawaaba kombuyuutarkaaga, Pod ku jira minikube-na ma gaari karo. Ka hor intaadan wax ka beddelin martigeliyaha, magacow darawalka ka dambeeya borofaylka firfircoon, sababtoo ah xaqiiqadan kaliya ayaa go'aamisa shabakadda codsigu dhab ahaan ka baxo. Kadib tijaabi isla endpoint-ka martigeliyaha, noodhka iyo Pod-ka. Mid keliya oo ka mid ah saddexdaas ayaa ah waxa guuldaraystay, mala-awaal khaldanna wuxuu lumiyaa galab.
Tallaabo 0: magacow darawalka iyo isha
Weydii minikube borofaylka kee ayaa firfircoon iyo sida uu u shaqeeyo. Darawalka konteenaradu wuxuu noodhka dhigaa konteenar ku jira mishiinkaaga, darawalka VM wuxuu dhigaa mishiin macmal ah, darawalka fogna wuxuu dhigaa meel kale gebi ahaan.
minikube profile list
minikube status
kubectl config current-contextTaas ka dib, qor halka codsigu ka yimaado. Jawaabtu waxay go'aamisaa resolver-ka ayaa iyo waddooyinka noocee ah ay muhiim yihiin, welina ma aha tan martigeliyaha. Laba borofayl oo isla kombuyuutarka ku yaal ayaa si gebi ahaan kala duwan u dhaqmi kara isla URL-ka.
| Context | What has to work |
|---|---|
| Host process | Host resolver and host route to the private destination |
| minikube node | The node's own resolver and its outbound path |
| Pod | Pod DNS through cluster services plus the cluster network path |
Tallaabo 1: tijaabi isla endpoint-ka saddex jeer
Isticmaal hal endpoint aan waxyeello lahayn oo saddexda tijaabo ka dhig magaca martigeliyaha, dekedda iyo qoyska cinwaanka isku mid. Haddii aad mid ka mid ah u beddesho inta u dhaxaysa socodka, natiijooyinka lama barbardhigi karo.
curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health
minikube ssh -- curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health
kubectl run probe --rm -it --image=curlimages/curl --restart=Never -- \
curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/healthSoo jiidashada image ee guulaysatay ee noodhka waxba kama caddaynso xallinta magacyada martigeliyaha gaarka ah. Codsi dadweyne oo guulaystay ayaa xitaa ka yar caddeeya. Natiijooyinka ku kala sooc macne ahaan, sababtoo ah qaab saddex saf ah waa ogaal iyo guul-darro keli ah waa tilmaan.
Haddii safka martigeliyahuna guuldarraysto, istaag. Waxaad leedahay dhibaato shabakadeed martigeliyaha oo kooxdu waa wax jeedinta feejignaanta.
Tallaabo 2: ilaali waddada martigeliyaha ee kooxda
Waxaa jira jiho labaad oo dadku illoobaan: martigeliyahu waa inuu sii wado gaaritaanka API-da iyo adeegyada kooxda lafteeda. Macmiil VPN ah wuxuu rakibi karaa waddooyin la tartama prefix-yada ay minikube u isticmaasho shabakadda noodhka, baaxadda adeegga iyo baaxadda pod-ka.
Marka taasi dhacdo, calaamaddu way wareertaa, sababtoo ah tunnel-ku wuu shaqeeyaa kubectl-na joojiyaa jawaabta ama NodePort wuu diidaa isku xirka. Waxay u ekaanaysaa cilad kooxeed laakiin waa cilad waddo-mariska kombuyuutarka.
Isbarbardhig shaxda waddo-mariska martigeliyaha iyo baaxadaha minikube ka hor intaadan tunnel-ka wax kale ku eedayn. Isdhexgalku wuxuu inta badan u muuqdaa waddo gaar ah oo u tilmaamaysa isdhexgalka tunnel-ka prefix ay kooxdu sheeganayso.
Tallaabo 3: xalli isdhexgalka adigoon damin VPN-ka
Buug-gacmeedka VPN iyo proxy ee minikube laftiisu wuxuu ka hadlayaa khilaafaadkaas wuxuuna u arkaa baaxadaha tusaalaha ah wax la hubiyo, ma aha liis caalami ah. Akhri isaga oo la socda borofaylka aad dhab ahaan haysato.
Meel uu isdhexgal dhab ah ka jiro, jawaabta la taageeray waa baaxad aan isdhexgal lahayn ama siyaasad gelitaan maxalli ah oo ula kac ah oo uu ansixiyay milkiilaha VPN-ka. Beddelka baaxadda adeeggu lama mid ah beddelka baaxadda pod-ka, midkoodna lama mid ah beddelka shabakadda noodhka.
Daminta tunnel-ka shirkadda si koox maxalli ah u shaqeyso ma aha marin-ka-wareeg; waa go'aan siyaasadeed oo qof kale uu qaato. U gee qofkaas halkii aad si aamusnaan ah u sameyn lahayd ka dib markii qof walba uu gurigiisa aaday. Haddii aad horey u samaysay, dib u soo celi ka hor intaadan weydiin.
Tallaabo 4: kala sooc proxy, DNS iyo afar qaab oo guul-darro
Haddii proxy loo baahan yahay, go'aami macnaha kee ayaa u baahan. Dejinta browser-ka martigeliyaha ma dejiso hab-raac gudaha noodhka, Pod-na wuxuu u baahan yahay doorsoomayaasha deegaanka ama dejinta proxy heer koox.
Kadib kala sooc guul-darrada halkii aad sharrax lahayd. Magac aan la xallin waa DNS. Magac la xalliyay oo diida isku xirka waa waddo-maris ama listener. Isku xir ka sameysma oo ku guuldarraysta aqoonsiga waa TLS. Isku xir guulaystay oo leh jir khalad waa barnaamijka.
Mid kasta oo ka mid ah afartaas waxaa u gaar ah hagaajin kale, oo mid keliya ayaa ku saabsan VPN-ka. Qor midka aad ku aragtay macne kasta, qofka xigaana wuxuu dhaxlaa caddayn halkii uu ka dhaxli lahaa sheeko.