Isticmaalka Secret jira oo loogu talagalay doorsoomayaasha proxy ee shaxda Helm

Tixraac URL-yada proxy ee buuxa ee ka yimid Secret ee qaabka Deployment ee Helm 3 halkii aad ka malayn lahayd in doorsoome shell uu noqon doono deegaanka container-ka.

Ka soo qaad in namespace-ka sii deynta uu horey u leeyahay Secret lagu magacaabo app-outbound-proxy. Furayaasheeda http_proxy iyo https_proxy waxay ka kooban yihiin URL-yada proxy ee buuxa ee ay u baahan tahay barnaamijka.

Shaxda Helm 3 waxay ku hayn kartaa magaca Secret-kaas oo keliya values.yaml:

outboundProxy:
  existingSecret: app-outbound-proxy

Qaabka Deployment ee container-ka loogu talagalay, tixraac furayaasha:

env:
  - name: HTTP_PROXY
    valueFrom:
      secretKeyRef:
        name: {{ .Values.outboundProxy.existingSecret | quote }}
        key: http_proxy
  - name: HTTPS_PROXY
    valueFrom:
      secretKeyRef:
        name: {{ .Values.outboundProxy.existingSecret | quote }}
        key: https_proxy

Kani waa qayb ka mid ah qeexidda container-ka. Secret waa inuu ku jiraa namespace-ka Pod oo uu ka koobnaadaa labada fure ee la tixraacay. Qiimayaashiisu waa inay isticmaalaan borotokoolka, martigeliyaha iyo dekedda dhageystaha proxy-ga dhabta ah. Codsiyada dadweynaha ee barnaamijka ee loo oggol yahay inay isticmaalaan proxy dadweyne oo aan xaqiijin, ka dhis URL-yadaas musharrax ku habboon oo ku jira liiska proxy-ga bilaashka ah; hayso wax kasta oo ka-reebis toos ah oo loo baahan yahay.

Qiimaha shaxdu wuxuu bixiyaa magac; secretKeyRef wuxuu bixiyaa qiimayaasha deegaanka container-ka. Kaliya export HTTP_PROXY ee shell-ka ordiya helm ma ku daro qaybtan env qaabka Pod.

Beddelidda Secret sidoo kale waa beddelid wareegga nolosha

Container-ku ma cusboonaysiiyo deegaankiisa marka xogta Secret is beddesho. Diyaari dib-u-bilow ama rollout loogu talagalay si container-yada cusub ay u helaan qiimayaasha la cusboonaysiiyay. Beddelidda xogta hoos timaada isla magaca Secret laftigeeda ma tafatirto qaabka Pod ee Deployment-ka.

Barnaamijku waa inuu taageeraa doorsoomayaasha deegaanka proxy ee la doortay. Helitaanka kaydka Helm iyo jiidista image-ka node-ka waa macaamiil gooni ah oo shaqeeya ka hor inta deegaankan container-ku uusan caawin karin.

Maqaallo la xiriira