255 lines
6.5 KiB
YAML
255 lines
6.5 KiB
YAML
apiVersion: v1
|
||
kind: ConfigMap
|
||
metadata:
|
||
name: nginx-conf
|
||
namespace: cpte-wms
|
||
annotations:
|
||
kubesphere.io/creator: admin
|
||
kubesphere.io/description: 配置文件
|
||
data:
|
||
nginx.conf: |
|
||
worker_processes 1;
|
||
|
||
events {
|
||
worker_connections 1024;
|
||
}
|
||
|
||
http {
|
||
include mime.types;
|
||
default_type application/octet-stream;
|
||
|
||
# ✅ 字符编码设置
|
||
charset utf-8;
|
||
charset_types text/html text/plain text/css application/javascript application/json;
|
||
|
||
sendfile on;
|
||
keepalive_timeout 65;
|
||
|
||
gzip on;
|
||
gzip_static on;
|
||
gzip_buffers 4 16k;
|
||
gzip_comp_level 5;
|
||
gzip_types text/plain application/javascript text/css application/xml text/javascript application/x-httpd-php image/jpeg image/gif image/png;
|
||
|
||
server {
|
||
listen 80;
|
||
listen [::]:80;
|
||
server_name 101.35.253.46;
|
||
|
||
# 前端配置
|
||
location / {
|
||
root /html/dist;
|
||
try_files $uri $uri/ /index.html last;
|
||
index index.html;
|
||
expires -1;
|
||
}
|
||
|
||
# 后端api配置
|
||
location /cpte-wms/ {
|
||
# 反向代理的java地址
|
||
proxy_pass http://101.35.253.46:8000/cpte-wms/;
|
||
proxy_redirect off;
|
||
|
||
# 设置代理消息头
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header Host $http_host;
|
||
|
||
# 设置没有缓存
|
||
expires -1;
|
||
|
||
# 安全配置
|
||
add_header Set-Cookie "Path=/; HttpOnly; Secure";
|
||
add_header X-Content-Type-Options "nosniff";
|
||
add_header X-XSS-Protection "1; mode=block";
|
||
add_header X-Frame-Options "ALLOW-FROM 101.35.253.46";
|
||
add_header Content-Security-Policy "frame-ancestors 101.35.253.46";
|
||
}
|
||
|
||
# 健康检查端点
|
||
location /health {
|
||
access_log off;
|
||
return 200 "healthy\n";
|
||
add_header Content-Type text/plain;
|
||
}
|
||
|
||
# 就绪检查端点
|
||
location /ready {
|
||
access_log off;
|
||
return 200 "ready\n";
|
||
add_header Content-Type text/plain;
|
||
}
|
||
}
|
||
}
|
||
|
||
default.html: |
|
||
<!DOCTYPE html>
|
||
<html lang="zh-CN">
|
||
<head>
|
||
<meta charset="UTF-8">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||
<title>Nginx - CPTE WMS</title>
|
||
<style>
|
||
body { font-family: Arial, "Microsoft YaHei", sans-serif; margin: 40px; background: #f5f5f5; }
|
||
.container { background: white; padding: 30px; border-radius: 8px; box-shadow: 0 2px 4px rgba(0,0,0,0.1); max-width: 600px; margin: 0 auto; }
|
||
h1 { color: #009639; }
|
||
.info { background: #e8f5e9; padding: 15px; border-radius: 4px; margin: 20px 0; }
|
||
.info p { margin: 8px 0; }
|
||
</style>
|
||
</head>
|
||
<body>
|
||
<div class="container">
|
||
<h1>✅ Nginx 部署成功!</h1>
|
||
<div class="info">
|
||
<p><strong>项目:</strong> CPTE WMS</p>
|
||
<p><strong>环境:</strong> Production</p>
|
||
<p><strong>时间:</strong> <span id="time"></span></p>
|
||
</div>
|
||
</div>
|
||
<script>document.getElementById('time').innerText = new Date().toLocaleString('zh-CN');</script>
|
||
</body>
|
||
</html>
|
||
|
||
---
|
||
# 2. Deployment
|
||
apiVersion: apps/v1
|
||
kind: Deployment
|
||
metadata:
|
||
name: nginx
|
||
namespace: cpte-wms
|
||
labels:
|
||
app: nginx
|
||
annotations:
|
||
kubesphere.io/description: "1.28.0"
|
||
spec:
|
||
replicas: 1
|
||
strategy:
|
||
type: RollingUpdate
|
||
rollingUpdate:
|
||
maxSurge: 1
|
||
maxUnavailable: 0
|
||
selector:
|
||
matchLabels:
|
||
app: nginx
|
||
template:
|
||
metadata:
|
||
labels:
|
||
app: nginx
|
||
version: v1
|
||
annotations:
|
||
prometheus.io/scrape: "true"
|
||
prometheus.io/port: "80"
|
||
spec:
|
||
containers:
|
||
- name: nginx
|
||
image: docker.io/library/nginx:1.28.0
|
||
imagePullPolicy: IfNotPresent
|
||
|
||
ports:
|
||
- name: http
|
||
containerPort: 80
|
||
protocol: TCP
|
||
|
||
resources:
|
||
requests:
|
||
cpu: "50m"
|
||
memory: "64Mi"
|
||
limits:
|
||
cpu: "500m"
|
||
memory: "256Mi"
|
||
|
||
livenessProbe:
|
||
httpGet:
|
||
path: /health
|
||
port: 80
|
||
initialDelaySeconds: 10
|
||
periodSeconds: 10
|
||
timeoutSeconds: 5
|
||
failureThreshold: 3
|
||
|
||
readinessProbe:
|
||
httpGet:
|
||
path: /ready
|
||
port: 80
|
||
initialDelaySeconds: 5
|
||
periodSeconds: 5
|
||
timeoutSeconds: 3
|
||
failureThreshold: 3
|
||
|
||
startupProbe:
|
||
httpGet:
|
||
path: /health
|
||
port: 80
|
||
initialDelaySeconds: 0
|
||
periodSeconds: 5
|
||
timeoutSeconds: 3
|
||
failureThreshold: 30
|
||
|
||
volumeMounts:
|
||
- name: nginx-conf
|
||
mountPath: /etc/nginx/nginx.conf
|
||
subPath: nginx.conf
|
||
readOnly: true
|
||
- name: nginx-html
|
||
mountPath: /html/dist
|
||
readOnly: true
|
||
- name: nginx-cache
|
||
mountPath: /var/cache/nginx
|
||
- name: nginx-log
|
||
mountPath: /var/log/nginx
|
||
|
||
env:
|
||
- name: NGINX_ENTRYPOINT_QUIET_LOGS
|
||
value: "true"
|
||
|
||
# ⚠️ 修复重点：volumes 配置
|
||
volumes:
|
||
- name: nginx-conf
|
||
configMap:
|
||
name: nginx-conf
|
||
items:
|
||
- key: nginx.conf
|
||
path: nginx.conf
|
||
- name: nginx-html
|
||
configMap:
|
||
name: nginx-conf
|
||
items:
|
||
- key: default.html
|
||
path: index.html
|
||
- name: nginx-cache
|
||
emptyDir: {}
|
||
- name: nginx-log
|
||
emptyDir: {}
|
||
|
||
restartPolicy: Always
|
||
|
||
---
|
||
# 3. Service
|
||
kind: Service
|
||
apiVersion: v1
|
||
metadata:
|
||
name: nginx-service
|
||
namespace: cpte-wms
|
||
creationTimestamp: '2026-03-16T11:55:00Z'
|
||
labels:
|
||
app: nginx
|
||
spec:
|
||
ports:
|
||
- name: nginx
|
||
protocol: TCP
|
||
port: 80
|
||
targetPort: 80
|
||
nodePort: 30575
|
||
selector:
|
||
app: nginx
|
||
clusterIP: 10.233.51.227
|
||
clusterIPs:
|
||
- 10.233.51.227
|
||
type: NodePort
|
||
sessionAffinity: None
|
||
externalTrafficPolicy: Cluster
|
||
ipFamilies:
|
||
- IPv4
|
||
ipFamilyPolicy: SingleStack
|
||
internalTrafficPolicy: Cluster
|