更新多个应用的镜像地址,调整数据存储路径,新增 Traefik 配置,删除无用的 Keycloak 配置文件,添加必须执行的脚本
This commit is contained in:
@@ -33,4 +33,45 @@ sudo vim /etc/rancher/k3s/registries.yaml
|
||||
|
||||
```sh
|
||||
kubectl apply -f https://raw.githubusercontent.com/traefik/traefik/v3.0/docs/content/reference/dynamic-configuration/kubernetes-crd-definition-v1.yml
|
||||
```
|
||||
|
||||
## let
|
||||
|
||||
# 将访问宿主机 80 端口的流量转发到 30080
|
||||
```sh
|
||||
sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 30080
|
||||
sudo iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-ports 30443
|
||||
|
||||
# 别忘了保存规则(Ubuntu 下)
|
||||
sudo apt install iptables-persistent
|
||||
sudo netfilter-persistent save
|
||||
```
|
||||
|
||||
## let 2
|
||||
|
||||
```sh
|
||||
#回路
|
||||
iptables -t nat -L PREROUTING -vn --line-numbers
|
||||
### 删除
|
||||
sudo iptables -t nat -D PREROUTING 1 2>/dev/null
|
||||
sudo iptables -t nat -I PREROUTING 1 -p tcp --dport 443 -j DNAT --to-destination 118.196.32.29:30443
|
||||
|
||||
|
||||
#去路(根据数据包判断顺序)
|
||||
sudo iptables -t nat -L POSTROUTING -vn --line-numbers
|
||||
## 删除
|
||||
sudo iptables -t nat -D POSTROUTING 1
|
||||
sudo iptables -t nat -A POSTROUTING -d 118.196.32.29 -p tcp --dport 30443 -j MASQUERADE
|
||||
|
||||
|
||||
#强制刷新权限
|
||||
sudo iptables -I FORWARD 1 -j ACCEPT
|
||||
sudo netfilter-persistent save
|
||||
```
|
||||
|
||||
|
||||
```
|
||||
CLUSTER_IP=$(kubectl get svc traefik -n traefik -o jsonpath='{.spec.clusterIP}')
|
||||
echo "Traefik 的固定 ClusterIP 是: $CLUSTER_IP"
|
||||
Traefik 的固定 ClusterIP 是: 10.43.131.173
|
||||
```
|
||||
Reference in New Issue
Block a user