I-minikube ayifinyeleli i-API yangasese? Hlola umshayeli kuqala

Umsingathi, inodi kanye ne-Pod ngayinye inemizila yayo kanye ne-resolver yayo. Shono umshayeli, hlola i-endpoint efanayo kuzo zontathu, bese ulungisa umongo ohlulekile.

I-API yangasese iphendula isuka kukhompyutha yakho ephathwayo kanti i-Pod ku-minikube ayikwazi ukuyifinyelela. Ngaphambi kokushintsha noma yini kumsingathi, shono umshayeli ongemuva kwephrofayela esebenzayo, ngoba leli qiniso elilodwa linquma ukuthi isicelo siphuma kunethiwekhi iphi ngempela. Bese uhlola i-endpoint efanayo kusuka kumsingathi, kunodi naku-Pod. Kukhona eyodwa kuphela kwezi zintathu okuyiyo into ehlulekile, futhi ukuqagela okungalungile kubiza intambama.

Isinyathelo 0: shono umshayeli kanye nomthombo

Buza i-minikube ukuthi iyiphi iphrofayela esebenzayo nokuthi isebenza kanjani. Umshayeli wekhonteyina ubeka inodi kukhonteyina kumshini wakho, umshayeli we-VM uyibeka kumshini ongenakho ukubonakala, futhi umshayeli okude uyibeka kwenye indawo ngokuphelele.

minikube profile list
minikube status
kubectl config current-context

Kusukela lokho, bhala ukuthi isicelo sivela kuphi. Impendulo inquma ukuthi i-resolver kabani nemizila iphi ebalulekile, futhi akusiyo njalo eyomsingathi. Amaphrofayela amabili kukhompyutha efanayo angaziphatha ngokuhluke ngokuphelele nge-URL efanayo.

ContextWhat has to work
Host processHost resolver and host route to the private destination
minikube nodeThe node's own resolver and its outbound path
PodPod DNS through cluster services plus the cluster network path

Isinyathelo 1: hlola i-endpoint efanayo izikhathi ezintathu

Sebenzisa i-endpoint eyodwa engenabungozi futhi gcina igama lomsingathi, imbobo kanye nomndeni wamakheli kufana kuzo zontathu izivivinyo. Uma ushintsha noma yikuphi kwalokho phakathi kokugijima, imiphumela ngeke ifaniswe.

curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health
minikube ssh -- curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health
kubectl run probe --rm -it --image=curlimages/curl --restart=Never -- \
  curl -sS -o /dev/null -w '%{http_code}\n' https://api.corp.example/health

Ukudonsa isithombe okuphumelele ngenodi akufakazeli lutho mayelana nokuxazululwa kwamagama kumsingathi wangasese. Isicelo esidlangalaleni esiphumelele sifakazela okuncane nakakhulu. Hlukanisa imiphumela ngokomongo, ngoba iphethini emugqeni emithathu ukuxilongwa kanti ukwehluleka okukodwa wumkhondo.

Uma umugqa womsingathi nawo wehluleka, yima. Unenkinga yenethiwekhi yomsingathi futhi iqoqo liwukuphazamisa.

Isinyathelo 2: gcina indlela yomsingathi eya eqoqweni

Kunesinye isiqondiso abantu abasikhohlwayo: umsingathi kufanele aqhubeke efinyelela i-API kanye nezinsizakalo zeqoqo ngokwalo. Iklayenti le-VPN lingafaka imizila encintisana neziqalo ezisetshenziswa yi-minikube zenethiwekhi yayo yenodi, ububanzi bensizakalo kanye nobubanzi be-pod.

Lapho lokho kwenzeka, uphawu luyadida, ngoba umhubhe uyasebenza kanti i-kubectl iyeka ukuphendula noma i-NodePort yenqaba ukuxhumana. Kubonakala njengokwehluleka kweqoqo kanti kuwukwehluleka kokuhamba kwendlela kukhompyutha ephathwayo.

Qhathanisa ithebula lokuhamba kwendlela lomsingathi nobubanzi be-minikube ngaphambi kokusola umhubhe nganoma yini enye. Ukweqa kuvame ukubonakala njengomzila oqondile kakhulu okhomba kusixhumi somhubhe seqalo iqoqo elilindele ukuba ngelalo.

Isinyathelo 3: xazulula ukweqa ngaphandle kokucisha i-VPN

Incwadi yesandla ye-VPN ne-proxy ye-minikube ngokwayo ixoxa ngalezi zingqubuzana futhi ithatha ububanzi bayo bezibonelo njengezinto okufanele zihlolwe, hhayi uhlu lomhlaba wonke. Yifunde kanye nephrofayela onawo ngempela.

Lapho kunesimo sokweqa sangempela, impendulo esekelwayo ububanzi obungaqhwamanisi noma inqubomgomo yokufinyelela yasendaweni ehlosiwe evunyelwe umnikazi we-VPN. Ukushintsha ububanzi bensizakalo akufani nokushintsha ububanzi be-pod, futhi akukho kwalokho okufana nokushintsha inethiwekhi yenodi.

Ukucisha umhubhe wenkampani ukuze iqoqo lasendaweni lisebenze akusiyo indlela yokugwema; isinqumo senqubomgomo okufanele sithathwe omunye umuntu. Yisa kumuntu lowo esikhundleni sokuyenza buthule ngemva kokuba wonke umuntu egodukile. Uma usuyenzile, buyisela emuva ngaphambi kokubuza.

Isinyathelo 4: hlukanisa i-proxy, i-DNS kanye nezinhlobo ezine zokwehluleka

Uma i-proxy idingeka, khomba ukuthi yimuphi umongo oyidingayo. Isilungiselelo sesiphequluli kumsingathi asilungiseleli inqubo ngaphakathi kwenodi, futhi i-Pod idinga iziguquli zemvelo noma ukulungiselelwa kwe-proxy ezingeni leqoqo.

Bese uhlukanisa ukwehluleka esikhundleni sokukuchaza. Igama elingaxazululeki i-DNS. Igama elixazululekayo futhi lenqaba ukuxhumana ukuhamba kwendlela noma i-listener. Ukuxhumana okusungulwayo futhi kwehluleke kubunikazi i-TLS. Ukuxhumana okuphumelele okunomzimba wephutha uhlelo lokusebenza.

Kukodwa kwalokho kuhambisana nokulungiswa okuhlukile, futhi kukodwa kuphela okuphathelene ne-VPN. Bhala ukuthi yikuphi okuqashelile kumongo ngamunye, futhi umuntu olandelayo uzofuza ubufakazi esikhundleni sendaba.

Izihloko ezihlobene