![\"\"](\"https:\/\/www.haifeihai.com\/wp-content\/uploads\/2022\/01\/3661F4DA-873D-4c1c-970B-B55117DB8478.png\")
<\/figure>\n\n\n\nwordpress\u955c\u50cf\u9009\u7528docker.io\/library\/wordpress:5.8.3-fpm\uff0c\u955c\u50cf\u9ed8\u8ba4\u4e0d\u81ea\u5e26nginx\uff0c\u8fd9\u91cc\u624b\u52a8\u6dfb\u52a0\u4e86nginx\u7684\u955c\u50cf\uff0cwordpress\u7528\u5230\u6570\u636e\u5e93\uff0c\u8fd9\u91cc\u9009\u7528\u4e86mysql\uff0c\u955c\u50cf\u4e3adocker.io\/library\/mysql:5.7\uff0c\u670d\u52a1\u7528\u5230\u7684pvc\u5747\u6765\u81ea\u81ea\u5efanfs\u505a\u4e86stroageclass\u3002\u7f51\u7ad9\u7684\u8bc1\u4e66\u76f4\u63a5\u5728\u817e\u8baf\u4e91\u7533\u8bf7\u7684\uff0c\u6d41\u7a0b\u7b80\u5355\uff0c\u514d\u8d39\u597d\u7528\uff08\u767d\u5ad6\u6700\u9999\uff09\uff0c\u7f3a\u70b9\u662f\u6709\u6548\u671f\u4e00\u5e74\uff0c\u4e00\u5e74\u540e\u8981\u91cd\u65b0\u7533\u8bf7\u3002\u5f00\u59cb\u5427\uff01<\/p>\n\n\n\n
\u4e00\u3001\u9996\u5148\u662fmysql\uff0c\u91c7\u7528\u65e0\u5934\u7684\u65b9\u5f0f\uff0c\u5355\u8282\u70b9deployment\u90e8\u7f72\uff0c\u5bc6\u7801env\u6302\u8f7dsecret\uff0csecret\u6709\u591a\u79cd\u521b\u5efa\u65b9\u5f0f\uff0c\u5982\u547d\u4ee4\u884c<\/p>\n\n\n\n
kubectl create secret mysql-pass --password='xxxxxx'<\/code><\/pre>\n\n\n\napiVersion: v1\nkind: Service\nmetadata:\n name: mysql\n labels:\n app: mysql\nspec:\n ports:\n - port: 3306\n selector:\n app: mysql\n clusterIP: None \n---\napiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n name: mysql-pv-claim\n annotations:\n volume.beta.kubernetes.io\/storage-class: \"nfs-storage\"\n labels:\n app: mysql\nspec:\n accessModes:\n - ReadWriteOnce\n resources:\n requests:\n storage: 5Gi\n---\napiVersion: apps\/v1\nkind: Deployment\nmetadata:\n name: mysql\n labels:\n app: mysql\nspec:\n selector:\n matchLabels:\n app: mysql\n strategy:\n type: Recreate\n template:\n metadata:\n labels:\n app: mysql\n spec:\n containers:\n - image: docker.io\/library\/mysql:5.7\n imagePullPolicy: IfNotPresent\n name: mysql\n env:\n - name: MYSQL_ROOT_PASSWORD\n valueFrom:\n secretKeyRef:\n name: mysql-pass\n key: password\n ports:\n - containerPort: 3306\n name: mysql\n volumeMounts:\n - name: mysql-storage\n mountPath: \/var\/lib\/mysql\n volumes:\n - name: mysql-storage\n persistentVolumeClaim:\n claimName: mysql-pv-claim<\/code><\/pre>\n\n\n\napply\u540e\u8fdb\u5165mysql\u7684pod\u521b\u5efa\u6570\u636e\u5e93wordpress<\/p>\n\n\n\n
\u4e8c\u3001wordpress\u7684\u76f8\u5173yaml<\/p>\n\n\n\n
wordpress\u7684pod\u4e2d\u52a0\u5165\u4e86nginx\u7684\u5bb9\u5668\uff0c\u505a\u4e86configmap\u6302\u8f7d\u66ff\u6362\u9ed8\u8ba4default.conf\uff0cnginx\u7684configmap\u5982\u4e0b<\/p>\n\n\n\n
apiVersion: v1\nkind: ConfigMap\nmetadata:\n name: wordpress-configs\ndata:\n default.conf: |\n server {\n listen 80 default_server;\n\n client_max_body_size 20m;\n\n root \/var\/www\/html;\n index index.php index.html index.htm;\n\n location ~ \\.php$ {\n fastcgi_pass 127.0.0.1:9000;\n fastcgi_index index.php;\n fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\n include fastcgi_params;\n }\n }\n<\/code><\/pre>\n\n\n\nwordpress\u4e2d\u7684\u73af\u5883\u53d8\u91cf\u4ee5secret\u7684\u65b9\u5f0f\u6302\u8f7d\uff0csecret\u7684yaml\u6587\u4ef6\u5982\u4e0b\uff0c\u81ea\u884c\u4fee\u6539user\u548cpassword<\/p>\n\n\n\n
apiVersion: v1\nkind: Secret\nmetadata:\n name: wordpress-secrets\nstringData:\n WORDPRESS_DB_HOST: \"wordpress-mysql\"\n WORDPRESS_DB_USER: \"xxxxx\"\n WORDPRESS_DB_PASSWORD: \"xxxxx\"\n<\/code><\/pre>\n\n\n\n\u4e0b\u9762\u662fwordpress\u76f8\u5173\u7684svc\u3001pvc\u3001deployment<\/p>\n\n\n\n
apiVersion: v1\nkind: Service\nmetadata:\n name: wordpress \n labels:\n app: wordpress\nspec:\n ports:\n - name: http\n port: 80\n targetPort: http \n selector:\n app: wordpress\n type: ClusterIP\n---\napiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n name: wp-pv-claim\n annotations:\n volume.beta.kubernetes.io\/storage-class: \"nfs-storage\"\n labels:\n app: wordpress\nspec:\n accessModes:\n - ReadWriteOnce\n resources:\n requests:\n storage: 5Gi\n---\napiVersion: apps\/v1\nkind: Deployment\nmetadata:\n name: wordpress\n labels:\n app: wordpress\nspec:\n selector:\n matchLabels:\n app: wordpress\n strategy:\n type: Recreate\n template:\n metadata:\n labels:\n app: wordpress\n spec:\n containers:\n - image: docker.io\/library\/wordpress:5.8.3-fpm\n name: wordpress\n envFrom:\n - secretRef:\n name: wordpress-secrets\n volumeMounts:\n - mountPath: \/var\/www\/html\n name: storage\n - image: docker.io\/nginx:1.21.0\n name: nginx\n ports:\n - containerPort: 80\n name: http\n volumeMounts:\n - mountPath: \/etc\/nginx\/conf.d\n name: configs\n - mountPath: \/var\/www\/html\n name: storage\n volumes:\n - name: storage\n persistentVolumeClaim:\n claimName: wp-pv-claim\n - name: configs\n configMap:\n name: wordpress-configs\n<\/code><\/pre>\n\n\n\n\u4e09\u3001\u7528\u4e8e\u53cd\u5411\u4ee3\u7406\u7684nginx\uff0c\u914d\u7f6e\u6587\u4ef6\u4e5f\u7528configmap\u6302\u8f7d\uff0c\u5305\u62ec\u4e3b\u914d\u7f6e\u6587\u4ef6nginx.conf\u548c\u865a\u62df\u4e3b\u673a\u914d\u7f6e\u6587\u4ef6haifeihai.com.conf\u3002<\/p>\n\n\n\n
\u6ce8\u610fwordpress\u7ecf\u8fc7\u4ee3\u7406\u4ee5\u540e\u4f7f\u7528https\u65f6\uff0c\u9759\u6001\u8d44\u6e90\u8fd8\u662fhttp\u7684\u65b9\u5f0f\u8bf7\u6c42\uff0c\u4f1a\u5bfc\u81f4\u65e0\u9650\u8df3\u8f6c\uff0c\u6240\u4ee5\u53ef\u4ee5\u5728\u4ee3\u7406\u7684nginx\u5904\u52a0\u5165 proxy_set_header X-Forwarded-Proto $scheme; \u4ee5\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\uff0c\u5728wordpress\u7684\u5b98\u65b9\u6587\u6863\u4e5f\u63d0\u5230\u4e86\u8fd9\u4e2a\u7279\u6027https:\/\/wordpress.org\/support\/article\/administration-over-ssl\/#using-a-reverse-proxy<\/p>\n\n\n\n
apiVersion: v1\nkind: ConfigMap\nmetadata:\n name: nginx-configs\ndata:\n nginx.conf: |\n user www-data;\n worker_processes auto;\n #error_log \/var\/log\/nginx\/error.log;\n pid \/run\/nginx.pid;\n \n # Load dynamic modules. See \/usr\/share\/doc\/nginx\/README.dynamic.\n include \/usr\/share\/nginx\/modules\/*.conf;\n \n events {\n worker_connections 10240;\n use epoll;\n }\n \n http {\n log_format main '$remote_addr - $remote_user [$time_local] \"$request\" '\n '$status $body_bytes_sent \"$http_referer\" '\n '\"$http_user_agent\" \"$http_x_forwarded_for\"';\n \n access_log \/var\/log\/nginx\/access.log main;\n \n server_names_hash_bucket_size 512; \n server_tokens off;\n sendfile on;\n tcp_nopush on;\n keepalive_timeout 65;\n types_hash_max_size 4096;\n \n gzip on;\n gzip_min_length 1k;\n gzip_buffers 16 8k;\n gzip_comp_level 4;\n gzip_proxied any;\n gzip_types\n text\/xml application\/xml application\/atom+xml application\/rss+xml application\/xhtml+xml\n text\/javascript application\/javascript application\/x-javascript\n text\/x-json application\/json application\/x-web-app-manifest+json\n text\/css text\/plain text\/x-component\n font\/opentype application\/x-font-ttf application\/vnd.ms-fontobject\n image\/x-icon image\/svg+xml;\n gzip_disable \"MSIE [1-6]\\.(?!.*SV1)\";\n \n \n include \/etc\/nginx\/mime.types;\n default_type application\/octet-stream;\n \n ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\n ssl_session_cache shared:SSL:1m;\n ssl_session_timeout 10m;\n ssl_ciphers HIGH:!aNULL:!MD5;\n ssl_prefer_server_ciphers on;\n \n proxy_set_header Host $http_host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $remote_addr;\n proxy_set_header X-Forwarded-Proto $scheme;\n \n include \/etc\/nginx\/conf.d\/*.conf;\n }\n\n haifeihai.com.conf: |\n server {\n listen 80;\n listen 443 ssl;\n server_name www.haifeihai.com haifeihai.com;\n\n ssl_certificate ssl\/tls.crt;\n ssl_certificate_key ssl\/tls.key;\n\n resolver 10.2.0.10;\n\n location \/favicon.ico {\n return 204;\n }\n\n location \/ {\n if ($host ~ \"^hai\") {\n return 301 https:\/\/www.$http_host$request_uri;\n }\n if ($ssl_protocol = \"\") {\n return 301 https:\/\/$http_host$request_uri;\n }\n set $upstream_name wordpress.default.svc.cluster.local;\n proxy_pass http:\/\/$upstream_name;\n }\n }\n<\/code><\/pre>\n\n\n\n\u672c\u6b21\u4f7f\u7528\u4e86https\uff0c\u6240\u4ee5\u5c06\u7533\u8bf7\u7684\u514d\u8d39\u8bc1\u4e66\u4ee5secret\u7684\u5f62\u5f0f\u6302\u8f7d\uff0c\u521b\u5efatls\u7c7b\u578b\u7684secret\uff0c\u81ea\u884c\u4fee\u6539\u83b7\u5f97\u7684\u8bc1\u4e66\u8def\u5f84\u548c\u79c1\u94a5\u8def\u5f84\uff0ctls\u7c7b\u578b\u7684secret\u521b\u5efa\u65f6\u4f1a\u81ea\u52a8\u5c06key\u4fee\u6539\u4e3atls.key\u548ctls.crt\u7684\u3002<\/p>\n\n\n\n
kubectl create secret tls haifeihai-secret --cert=haifeihai.com_bundle.crt --key=haifeihai.com.key<\/code><\/pre>\n\n\n\n\u53cd\u5411\u4ee3\u7406ngixn\u7684deployment\uff0c\u4e4b\u524d\u4e5f\u63d0\u5230\u4e86\uff0c\u4e3a\u4e86\u65b9\u4fbf\u89e3\u6790\uff0c\u4f7f\u7528hostnetwork\u3002<\/p>\n\n\n\n
apiVersion: apps\/v1\nkind: Deployment\nmetadata:\n name: nginx\nspec:\n selector:\n matchLabels:\n app: nginx\n strategy:\n type: Recreate\n template:\n metadata:\n labels:\n app: nginx\n spec:\n hostNetwork: true\n dnsPolicy: ClusterFirstWithHostNet\n containers:\n - image: docker.io\/nginx:1.21.0\n name: nginx\n volumeMounts:\n - mountPath: \/etc\/nginx\/nginx.conf\n name: configs\n subPath: nginx.conf\n - mountPath: \/etc\/nginx\/conf.d\/default.conf\n name: configs\n subPath: haifeihai.com.conf\n - mountPath: \/etc\/nginx\/ssl\/tls.crt\n name: certs\n subPath: tls.crt\n - mountPath: \/etc\/nginx\/ssl\/tls.key\n name: certs\n subPath: tls.key\n volumes:\n - name: configs\n configMap:\n name: nginx-configs\n - name: certs\n secret:\n secretName: haifeihai-secrets<\/code><\/pre>\n\n\n\n\u5230\u6b64\u4fbf\u5df2\u5b8c\u6210\u4e86\u4f7f\u7528k8s\u90e8\u7f72https\u7684wordpress\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u6ca1\u6709\u60f3\u5230\u7528k8s\u642dhttps\u7248\u7684wordpress\u80fd\u8017\u65f6\u8fd9\u4e48\u4e45\uff0c\u8fd8\u642d\u4e0a\u4e86\u6211\u7684\u57fa\u53cbslash\u5148\u751f\uff0c\u65e2\u7136\u8fd9\u4e48\u8d39\u4e8b\uff0c… \u7ee7\u7eed\u9605\u8bfb\u7528k8s\u642d\u5efa\u4e00\u4e2ahttps\u7684wordpress<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4,5],"tags":[],"class_list":["post-24","post","type-post","status-publish","format-standard","hentry","category-k8s","category-wp","entry"],"_links":{"self":[{"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=\/wp\/v2\/posts\/24","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=24"}],"version-history":[{"count":7,"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=\/wp\/v2\/posts\/24\/revisions"}],"predecessor-version":[{"id":52,"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=\/wp\/v2\/posts\/24\/revisions\/52"}],"wp:attachment":[{"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.haifeihai.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}