-
Notifications
You must be signed in to change notification settings - Fork 0
/
ReadMe
83 lines (77 loc) · 4.69 KB
/
ReadMe
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
---
kubectl create ns securesvc
kubectl label ns securesvc istio-injection=enabled
openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -subj '/O=local.com./CN=*.local.com' -keyout local.io.key -out local.io.crt
kubectl create -n istio-system secret tls local-credential --key=local.io.key --cert=local.io.crt
kubectl create -f httpserver2-ssl-istio-all.yaml -n securesvc
[root@k8s-node-1 ~]# kubectl get svc -nistio-system
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
istio-egressgateway ClusterIP 10.110.244.66 <none> 80/TCP,443/TCP 5d22h
istio-ingressgateway LoadBalancer 10.100.249.123 172.16.100.142 15021:30709/TCP,80:31080/TCP,443:31197/TCP,31400:31492/TCP,15443:32735/TCP 4d4h
istiod ClusterIP 10.98.117.213 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP 5d22h
jaeger-collector ClusterIP 10.97.75.172 <none> 14268/TCP,14250/TCP,9411/TCP 3d1h
tracing ClusterIP 10.97.215.170 <none> 80/TCP,16685/TCP 3d1h
zipkin ClusterIP 10.98.66.67 <none> 9411/TCP 3d1h
[root@k8s-node-1 ~]# curl -H "Host: httpserver2.local.com" 10.100.249.123/simple/hello
X-Envoy-Peer-Metadata=[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]
X-B3-Traceid=[a5f64bc9cb2dc806f63283625c90199f]
X-B3-Sampled=[1]
User-Agent=[curl/7.29.0]
X-Forwarded-Proto=[http]
X-Forwarded-For=[172.30.100.81]
X-Envoy-Internal=[true]
X-Envoy-Decorator-Operation=[httpserver2.simple.svc.cluster.local:80/simple/hello]
X-Envoy-Original-Path=[/simple/hello]
Accept=[*/*]
X-Envoy-Peer-Metadata-Id=[router~192.168.76.165~istio-ingressgateway-7c8bc47b49-gr5gr.istio-system~istio-system.svc.cluster.local]
X-B3-Spanid=[f63283625c90199f]
X-Request-Id=[7deddd02-a364-9c67-b50a-f90047d96c28]
X-Envoy-Attempt-Count=[1]
----
docker build -t httpserver2:v1.0 .
docker run -d -p 80:81 httpserver2:v1.0
docker inspect f6328e127ff7 |grep id
nsenter -t 55839 -n ip addr
---------------------------
Sending build context to Docker daemon 9.257MB
Step 1/9 : FROM golang:1.17 AS builder
1.17: Pulling from library/golang
0e29546d541c: Pull complete
9b829c73b52b: Pull complete
cb5b7ae36172: Pull complete
6494e4811622: Pull complete
6e1d20a8313e: Pull complete
593823f101dc: Pull complete
1b4aae56cdbe: Pull complete
Digest: sha256:c72fa9afc50b3303e8044cf28fb358b48032a548e1825819420fd40155a131cb
Status: Downloaded newer image for golang:1.17
---> 276895edf967
Step 2/9 : ENV GO111MODULE=off CGO_ENABLED=0 GOOS=linux GOARCH=amd64
---> Running in b664df4f595c
Removing intermediate container b664df4f595c
---> c37d590a7391
Step 3/9 : WORKDIR /build
---> Running in 72b584d2cd7c
Removing intermediate container 72b584d2cd7c
---> 2633c4c17f7b
Step 4/9 : COPY . .
---> f8ea2b2d7754
Step 5/9 : RUN go build -o httpserver2 .
---> Running in 8800abd785ef
Removing intermediate container 8800abd785ef
---> bb5af623aacb
Step 6/9 : FROM scratch
--->
Step 7/9 : COPY --from=builder /build/httpserver2 /
---> d03908f98cf8
Step 8/9 : EXPOSE 8080
---> Running in 900c45beb270
Removing intermediate container 900c45beb270
---> ce7e424a4622
Step 9/9 : ENTRYPOINT ["/httpserver2"]
---> Running in 07c56a50eaee
Removing intermediate container 07c56a50eaee
---> c45bba407fe7
Successfully built c45bba407fe7
Successfully tagged httpserver2:v1.0
------------------------------------