Sebenzisa i-Secret ekhona yezinguquko ze-proxy ku-chart ye-Helm
Bhekisa kuma-URL e-proxy aphelele avela ku-Secret kusifanekiso se-Deployment se-Helm 3 esikhundleni sokucabanga ukuthi inguquko ye-shell iba indawo ye-container.
Ake sithi i-namespace yokukhishwa isinayo i-Secret ebizwa ngokuthi app-outbound-proxy. Izikhi zayo http_proxy ne-https_proxy ziqukethe ama-URL e-proxy aphelele adingwa uhlelo.
I-chart ye-Helm 3 ingagcina igama laleyo Secret kuphela ku-values.yaml:
outboundProxy:
existingSecret: app-outbound-proxy
Kusifanekiso se-Deployment sesitsha esihlosiwe, bhekisa kuzikhi:
env:
- name: HTTP_PROXY
valueFrom:
secretKeyRef:
name: {{ .Values.outboundProxy.existingSecret | quote }}
key: http_proxy
- name: HTTPS_PROXY
valueFrom:
secretKeyRef:
name: {{ .Values.outboundProxy.existingSecret | quote }}
key: https_proxy
Lokhu kuyingxenye yesicaciso se-container. I-Secret kufanele ibe khona ku-namespace ye-Pod futhi ibe nazo zombili izikhi okubhekiswe kuzo. Amanani ayo kufanele asebenzise iphrothokholi, umsingathi kanye nechweba lomlaleli we-proxy wangempela. Ezingxenyeni zokucela zomphakathi zohlelo ezivunyelwe ukusebenzisa i-proxy yomphakathi ngaphandle kokuqinisekisa, akhe lawa ma-URL kusukela kumuntu ofanele ku-uhlu lwe-proxy yamahhala; gcina noma yikuphi ukushiywa ngaphandle okuqondile okudingekayo.
Inani le-chart linikeza igama; i-secretKeyRef inikeza amanani endawo ye-container. Ukukhipha nje i-HTTP_PROXY ku-shell eqhuba i-helm akufaki lesi sigaba se-env kusifanekiso se-Pod.
Ukushintsha i-Secret nakho kuwushintsho lomjikelezo wempilo
I-container ayivuseleli indawo yayo lapho idatha ye-Secret ishintsha. Hlela ukuqalisa kabusha noma i-rollout okuhlosiwe ukuze amakhonteyina asanda kuqalwa athole amanani abuyekeziwe. Ukushintsha idatha ngaphansi kwegama le-Secret elifanayo akuhleli ngokwako isifanekiso se-Pod se-Deployment.
Uhlelo kufanele lusekele izinguquko zendawo ye-proxy ezikhethiwe. Ukufinyelela isitoreji se-Helm nokudonsa i-image kunodi kungabasebenzisi abahlukene abasebenza ngaphambi kokuthi le ndawo ye-container isize.