博客k8s部署

2024-09-24

字数统计: 442字 | 阅读时长≈ 2分

本体

as title, 我在几周前把博客从单linux vps部署,迁移到了k8s集群部署.

所以有人发现了吗(乐)

附录:

备忘录:

证书部分参考: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes

ingress全部定义在backend namespace

cert-manager排障: https://cert-manager.io/docs/troubleshooting/

https://cert-manager.io/docs/troubleshooting/acme/

certificate注册失败时, 有可能需要手动骗一下cert-manager, 例如:

xenoamess@xenoamessum890pro:~$ kubectl get certificate -n backend
NAME            READY   SECRET          AGE
whale3070.com   True    whale3070.com   21m
xenoamess.com   True    xenoamess.com   174d
xenoamess@xenoamessum890pro:~$ kubectl edit certificate -n backend whale3070.com

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  creationTimestamp: '2025-02-20T13:22:14Z'
  generation: 3
  labels:
    k8slens-edit-resource-version: v1
  name: whale3070.com
  namespace: backend
  ownerReferences:
    - apiVersion: networking.k8s.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Ingress
      name: ingress-whale3070blog
      uid: 6dea2264-21fc-4ad8-9466-5ce2c4e297e4
  resourceVersion: '67076761'
  uid: a58ee1c0-980b-4a53-ad47-5ecc8a19f184
  selfLink: /apis/cert-manager.io/v1/namespaces/backend/certificates/whale3070.com
status:
  conditions:
    - lastTransitionTime: '2025-02-20T13:41:02Z'
      message: Certificate is up to date and has not expired
      observedGeneration: 3
      reason: Ready
      status: 'True'
      type: Ready
  notAfter: '2025-05-21T12:42:29Z'
  notBefore: '2025-02-20T12:42:30Z'
  renewalTime: '2025-04-21T12:42:29Z'
  revision: 1
spec:
  dnsNames:
    - www.whale3070.com
    - whale3070.com
    - blog.whale3070.com
  issuerRef:
    group: cert-manager.io
    kind: Issuer
    name: letsencrypt-nginx
  secretName: whale3070.com
  usages:
    - digital signature
    - key encipherment

手动改为

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  creationTimestamp: '2025-02-20T13:22:14Z'
  generation: 3
  labels:
    k8slens-edit-resource-version: v1
  name: whale3070.com
  namespace: backend
  ownerReferences:
    - apiVersion: networking.k8s.io/v1
      blockOwnerDeletion: true
      controller: true
      kind: Ingress
      name: ingress-whale3070blog
      uid: 6dea2264-21fc-4ad8-9466-5ce2c4e297e4
  resourceVersion: '67076761'
  uid: a58ee1c0-980b-4a53-ad47-5ecc8a19f184
  selfLink: /apis/cert-manager.io/v1/namespaces/backend/certificates/whale3070.com
status:
  conditions:
    - lastTransitionTime: '2025-02-20T13:41:02Z'
      message: Certificate is up to date and has not expired
      observedGeneration: 3
      reason: Ready
      status: 'True'
      type: Ready
  notAfter: '2025-05-21T12:42:29Z'
  notBefore: '2025-02-20T12:42:30Z'
  renewalTime: '2025-04-21T12:42:29Z'
  revision: 1
spec:
  dnsNames:
    - whale3070.com
    - '*.whale3070.com'
  issuerRef:
    group: cert-manager.io
    kind: Issuer
    name: letsencrypt-nginx
  secretName: whale3070.com
  usages:
    - digital signature
    - key encipherment

本文作者： XenoAmess
本文链接： http://xenoamess.com/2024/09/24/20240924博客k8s部署/
版权声明：
本作品采用知识共享署名-非商业性使用-相同方式共享 4.0 国际许可协议进行许可。