|
|
@@ -70,6 +70,16 @@ source /etc/profile
|
|
|
mkdir -p /root/.kube/
|
|
|
ln -sf /etc/rancher/k3s/k3s.yaml /root/.kube/config
|
|
|
cat /root/.kube/config #查看kubeconfig文件内容
|
|
|
+
|
|
|
+```
|
|
|
+
|
|
|
+- **将Master节点配置上一个污点，使其不可调度**
|
|
|
+```shell
|
|
|
+kubectl taint nodes waf-lan-k3s-master node-role.kubernetes.io/control-plane:NoSchedule
|
|
|
+# 查看是否设置成功
|
|
|
+kubectl describe nodes waf-lan-k3s-master |grep Taints
|
|
|
+# 命令显示内容如下：
|
|
|
+Taints: node-role.kubernetes.io/control-plane:NoSchedule
|
|
|
```
|
|
|
|
|
|
#### 配置k3s集群中的私有仓库信息
|
|
|
@@ -1003,7 +1013,7 @@ safeline-mgt NodePort 10.43.243.181 <none> 1443:31443
|
|
|
|
|
|
**获取到nginx-ingress中转发过来的`X-Forwarded-For`字段的tengine中访问日志示例：**
|
|
|
```
|
|
|
-10.42.1.1 - - [16/Apr/2024:16:52:36 +0800] "www.abc.com" "GET /message-ajaxGetMessage-0.html HTTP/1.1" 200 0 "https://www.abc.com/my/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "222.234.923.56"
|
|
|
+192.168.3.45 - - [16/Apr/2024:16:52:36 +0800] "www.abc.com" "GET /message-ajaxGetMessage-0.html HTTP/1.1" 200 0 "https://www.abc.com/my/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "222.234.923.56"
|
|
|
```
|
|
|
> 除Nginx-Ingress可以实现客户端真实IP外，k3s自带的teafik也能实现，但需要做一定的修改，感兴趣的可自行研究此处再做赘述。
|
|
|
|
ct-jaryn