控制节点 + IngressRoute
default.conf: | server { listen 80; server_name localhost; root /usr/share/nginx/html; index index.html; location / { add_header X-Backend "M2"; try_files $uri $uri/ /index.html; } } --- apiVersion: apps/v1 kind: Deployment metadata: name: nginx-m2 namespace: default labels: app: nginx-m2 matrix: "03-02-m2" spec: replicas: 1 selector: matchLabels: app: nginx-m2 template: metadata: labels: app: nginx-m2 spec: nodeSelector: kubernetes.io/hostname: ylc61 volumes: - name: html configMap: name: nginx-m2-html containers: - name: nginx image: nginx:alpine ports: - containerPort: 80 volumeMounts: - name: html mountPath: /usr/share/nginx/html/index.html subPath: index.html readOnly: true - name: html mountPath: /etc/nginx/conf.d/default.conf subPath: default.conf readOnly: true --- apiVersion: v1 kind: Service metadata: name: nginx-m2 namespace: default spec: selector: app: nginx-m2 ports: - port: 80 targetPort: 80 --- apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: name: nginx-m2 namespace: default spec: entryPoints: - websecure routes: - match: Host(`test02.jackadam.top`) kind: Rule services: - name: nginx-m2 port: 80 tls: certResolver: cloudflare --- # 03-02 HTTP-only：M2 路由（仅 web，无 TLS），与 nginx-m2 共用 Service apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: name: nginx-m2-http namespace: default spec: entryPoints: - web routes: - match: Host(`test02.jackadam.top`) kind: Rule services: - name: nginx-m2 port: 80