mirror of
https://github.com/nsnail/Ocelot.git
synced 2025-06-19 12:18:16 +08:00
update k8s doc & samples (#885)
* refactor :kubernetes use in cluster * feat:delete KubeClient * feat : update k8s doc & samples
This commit is contained in:
@ -16,9 +16,24 @@ Then add the following to your ConfigureServices method.
|
||||
|
||||
If you have services deployed in kubernetes you will normally use the naming service to access them.
|
||||
|
||||
.. code-block::csharp
|
||||
public static class OcelotBuilderExtensions
|
||||
{
|
||||
public static IOcelotBuilder AddKubernetes(this IOcelotBuilder builder, bool usePodServiceAccount = true);
|
||||
}
|
||||
|
||||
Default usePodServiceAccount = True, which means that ServiceAccount using Pod to access the service of the k8s cluster needs to be ServiceAccount based on RABC authorization, you can replicate a Permissive. Using RBAC role bindings.
|
||||
`Permissive RBAC Permissions <https://kubernetes.io/docs/reference/access-authn-authz/rbac/#permissive-rbac-permissions>`, k8s api server and token will read from pod .
|
||||
|
||||
.. code-block::json
|
||||
kubectl create clusterrolebinding permissive-binding \
|
||||
--clusterrole=cluster-admin \
|
||||
--user=admin \
|
||||
--user=kubelet \
|
||||
--group=system:serviceaccounts
|
||||
|
||||
The following example shows how to set up a ReRoute that will work in kubernetes. The most important thing is the ServiceName which is made up of the
|
||||
kubernetes service name. We also need to set up the ServiceDiscoveryProvider in
|
||||
GlobalConfiguration. The example here shows a typical configuration. It assumes kubernetes api server is running on 192.168.0.13 and that api service is on port 443.
|
||||
kubernetes service name. We also need to set up the ServiceDiscoveryProvider in GlobalConfiguration. The example here shows a typical configuration.
|
||||
|
||||
|
||||
.. code-block:: json
|
||||
@ -43,6 +58,8 @@ GlobalConfiguration. The example here shows a typical configuration. It assumes
|
||||
}
|
||||
}
|
||||
}
|
||||
Service deployment in Namespace Dev , ServiceDiscoveryProvider type is kube, you also can set pollkube ServiceDiscoveryProvider type.
|
||||
Note: Host、 Port and Token are no longer in use。
|
||||
|
||||
You use Ocelot to poll kubernetes for latest service information rather than per request. If you want to poll kubernetes for the latest services rather than per request (default behaviour) then you need to set the following configuration.
|
||||
|
||||
|
Reference in New Issue
Block a user