功能测试

# 项目文件

### 1、前端k8s部署

![image-20250429145447840](C:\Users\JayCao\AppData\Roaming\Typora\typora-user-images\image-20250429145447840.png)

1、Dockerfile

```
FROM nginx
ADD ./nginx.conf /etc/nginx/nginx.conf
COPY ./dist/ /usr/share/nginx/html/
```

2、nginx.conf

```
worker_processes  1;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    # 限制body大小
    client_max_body_size 100m;
    # 开启静态资源压缩
    gzip_static on;

log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent "$http_referer" '
                          '"$http_user_agent" "$http_x_forwarded_for"';

access_log  /var/log/nginx/access.log  main;

upstream server {
        ip_hash;
        server 127.0.0.1:8080;
        server 127.0.0.1:8081;
    }

upstream monitor-admin {
        server 127.0.0.1:9090;
    }

upstream snailjob-server {
        server 127.0.0.1:8800;
    }

server {
        listen       80;
        server_name  localhost;

# https配置参考 start
        #listen       443 ssl;

# 证书直接存放 /docker/nginx/cert/ 目录下即可 更改证书名称即可 无需更改证书路径
        #ssl on;
        #ssl_certificate      /etc/nginx/cert/xxx.local.crt; # /etc/nginx/cert/ 为docker映射路径 不允许更改
        #ssl_certificate_key  /etc/nginx/cert/xxx.local.key; # /etc/nginx/cert/ 为docker映射路径 不允许更改
        #ssl_session_timeout 5m;
        #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        #ssl_prefer_server_ciphers on;
        # https配置参考 end

# 演示环境配置 拦截除 GET POST 之外的所有请求
        # if ($request_method !~* GET|POST) {
        #     rewrite  ^/(.*)$  /403;
        # }

# location = /403 {
        #     default_type application/json;
        #     return 200 '{"msg":"演示模式，不允许操作","code":500}';
        # }

# 限制外网访问内网 actuator 相关路径
        location ~ ^(/[^/]*)?/actuator.*(/.*)?$ {
            return 403;
        }

location / {
            root   /usr/share/nginx/html; # docker映射路径 不允许更改
            try_files $uri $uri/ /index.html;
            index  index.html index.htm;
        }

location /prod-api/ {
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_read_timeout 86400s;
            # sse 与 websocket参数
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_buffering off;
            proxy_cache off;
            proxy_pass http://server/;
        }

# https 会拦截内链所有的 http 请求 造成功能无法使用
        # 解决方案1 将 admin 服务 也配置成 https
        # 解决方案2 将菜单配置为外链访问 走独立页面 http 访问
        location /admin/ {
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://monitor-admin/admin/;
        }

location /snail-job/ {
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header REMOTE-HOST $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_pass http://snailjob-server/snail-job/;
        }

error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}

```

3、k8s的deploy.yml

```
kind: Deployment
apiVersion: apps/v1
metadata:
  name: bsw-fronted-admin-caojie
  namespace: test-01
  labels:
    app: bsw-fronted-admin-caojie
  annotations:
    deployment.kubernetes.io/revision: '1'
    kubesphere.io/alias-name: 白沙湾街道前端admin
    kubesphere.io/creator: admin
spec:
  replicas: 2
  selector:
    matchLabels:
      app: bsw-fronted-admin-caojie
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: bsw-fronted-admin-caojie
      annotations:
        kubesphere.io/creator: admin
        kubesphere.io/imagepullsecrets: '{"container-hxpfgl":"srd-sup"}'
    spec:
      volumes:
        - name: host-time
          hostPath:
            path: /etc/localtime
            type: ''
      containers:
        - name: container-hxpfgl
          image: >-
            yd02-artifact.srdcloud.cn/ybsup-release-docker-local/bsw-fronted-admin-caojie:latest
          ports:
            - name: tcp-80a
              containerPort: 80
              protocol: TCP
          resources:
            limits:
              cpu: 500m
              memory: 256Mi
            requests:
              cpu: 500m
              memory: 256Mi
          volumeMounts:
            - name: host-time
              readOnly: true
              mountPath: /etc/localtime
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
          imagePullPolicy: Always
      restartPolicy: Always
      terminationGracePeriodSeconds: 30
      dnsPolicy: ClusterFirst
      serviceAccountName: default
      serviceAccount: default
      securityContext: {}
      imagePullSecrets:
        - name: srd-sup
      schedulerName: default-scheduler
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxUnavailable: 25%
      maxSurge: 25%
  revisionHistoryLimit: 10
  progressDeadlineSeconds: 600

```

nmcli connection modify eth0 +ipv4.routes "133.0.0.0/8 192.168.100.100"
nmcli connection modify eth0 +ipv4.routes "10.238.0.0/16 192.168.100.100"
nmcli connection up eth0

<服务名称>.<名称空间>.svc.cluster.local服务

| 啊啊   | 啊啊 | 啊啊       | 啊啊 |
| ------ | ---- | ---------- | ---- |
| 萨达啊 | 按时 | 阿斯顿撒旦 |      |
|        |      |            |      |
|        |      |            |      |