Ake sithi i-namespace yokukhishwa isinayo i-Secret ebizwa ngokuthi app-outbound-proxy. Izikhi zayo http_proxy ne-https_proxy ziqukethe ama-URL e-proxy aphelele adingwa uhlelo.

I-chart ye-Helm 3 ingagcina igama laleyo Secret kuphela ku-values.yaml:

outboundProxy:
  existingSecret: app-outbound-proxy

Kusifanekiso se-Deployment sesitsha esihlosiwe, bhekisa kuzikhi:

env:
  - name: HTTP_PROXY
    valueFrom:
      secretKeyRef:
        name: {{ .Values.outboundProxy.existingSecret | quote }}
        key: http_proxy
  - name: HTTPS_PROXY
    valueFrom:
      secretKeyRef:
        name: {{ .Values.outboundProxy.existingSecret | quote }}
        key: https_proxy

Lokhu kuyingxenye yesicaciso se-container. I-Secret kufanele ibe khona ku-namespace ye-Pod futhi ibe nazo zombili izikhi okubhekiswe kuzo. Amanani ayo kufanele asebenzise iphrothokholi, umsingathi kanye nechweba lomlaleli we-proxy wangempela. Ezingxenyeni zokucela zomphakathi zohlelo ezivunyelwe ukusebenzisa i-proxy yomphakathi ngaphandle kokuqinisekisa, akhe lawa ma-URL kusukela kumuntu ofanele ku-uhlu lwe-proxy yamahhala; gcina noma yikuphi ukushiywa ngaphandle okuqondile okudingekayo.

Inani le-chart linikeza igama; i-secretKeyRef inikeza amanani endawo ye-container. Ukukhipha nje i-HTTP_PROXY ku-shell eqhuba i-helm akufaki lesi sigaba se-env kusifanekiso se-Pod.

Ukushintsha i-Secret nakho kuwushintsho lomjikelezo wempilo

I-container ayivuseleli indawo yayo lapho idatha ye-Secret ishintsha. Hlela ukuqalisa kabusha noma i-rollout okuhlosiwe ukuze amakhonteyina asanda kuqalwa athole amanani abuyekeziwe. Ukushintsha idatha ngaphansi kwegama le-Secret elifanayo akuhleli ngokwako isifanekiso se-Pod se-Deployment.

Uhlelo kufanele lusekele izinguquko zendawo ye-proxy ezikhethiwe. Ukufinyelela isitoreji se-Helm nokudonsa i-image kunodi kungabasebenzisi abahlukene abasebenza ngaphambi kokuthi le ndawo ye-container isize.

Izihloko ezihlobene