用nginx缩短Kubernetes dashboard访问url-ygqygq2
############负载均衡配置########### upstream k8s_dev {server 192.168.105.92:8443 ;
server 192.168.105.92:8443 ;
server 192.168.105.92:8443 ;
}
############负载均衡配置###########
server {
listen 80 ;
server_name192.168.105.99;
#access_loglogs/host.access.logmain;
location / {
root html;
indexindex.html index.htm;
}
location /k8s/ {
return 301 https://$host$request_uri;# 强制使用https方式
}
}
# HTTPS server
server {
listen 443 ssl;
server_name192.168.105.99 ;
ssl_certificate certs/192.168.105.99.crt;# 被访问域名证书
ssl_certificate_keycerts/192.168.105.99.key;
# Recommendations from https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
ssl_protocols TLSv1.1 TLSv1.2;
ssl_ciphers '!aNULL:kECDH+AESGCM:ECDH+AESGCM:RSA+AESGCM:kECDH+AES:ECDH+AES:RSA+AES:';
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
location / {
root html;
indexindex.html index.htm;
}
location /k8s/ {
proxy_ssl_trusted_certificate /etc/kubernetes/pki/ca.crt; # Kubernetes CA证书
proxy_ssl_certificate certs/kubecfg.crt; # 客户端证书
proxy_ssl_certificate_key certs/kubecfg.key;
proxy_ssl_session_reuse on;
proxy_passhttps://k8s_dev/api/v1/namespaces/kube-system/services/https:kubernetes-dashboard:/proxy/ ; # 跳转
}
}
页:
[1]