June 2021
Intermediate to advanced
335 pages
5h 50m
Chinese
Content preview from Kubernetes编程
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
278
｜
第
9
章
9.1.4
搭建
HTTPS
服务器
第一步是要启动一个支持
TLS
（
Transport Layer Security
，传输层安全，比如
HTTPS
）的
Web
服务器。
Kubernetes
中的
Webhook
要求必须使用
HTTPS
。
对于转换
Webhook
，
Kubernetes API
服务器更是会通过
CRD
对象中绑定的
CA
对相关的证书进行验证。
在我们的示例项目中，我们使用
k8s.io/apiserver
中自带的安全服务库。它能
提供完整的
TLS
参数和行为，与你在部署
kube-apiserver
或聚合
API
服务
器时所使用的一样。
k8s.io/apiserver
中与安全服务相关的代码使用“选项
-
配置”模式（参考“
8.4.1
选项、配置模式和启动基础设施”）。可以很方便地把它集成到你自己的应用中：
func NewDefaultOptions() *Options {
o := &Options{
*options.NewSecureServingOptions(),
}
o.SecureServing.ServerCert.PairName = "pizza-crd-webhook"
return o
}
type Options struct {
SecureServing options.SecureServingOptions
}
type Config struct {
SecureServing *server.SecureServingInfo
}
func (o ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.