mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-09-26 13:08:11 +00:00
Removing nginx-ingress, updating some phrasing regarding Traefik Ingress usage.
Signed-off-by: Sunil Singh <sunil.singh@suse.com>
This commit is contained in:
+5
-7
@@ -9,7 +9,7 @@ title: Rancher Server Kubernetes 集群的问题排查
|
||||
故障排除主要针对以下 3 个命名空间中的对象:
|
||||
|
||||
- `cattle-system`:`rancher` deployment 和 Pod。
|
||||
- `ingress-nginx`:Ingress Controller Pod 和 services。
|
||||
- `traefik`:Ingress Controller Pod 和 services。
|
||||
- `cert-manager`:`cert-manager` Pod。
|
||||
|
||||
## "default backend - 404"
|
||||
@@ -117,14 +117,12 @@ Events:
|
||||
kubectl -n cattle-system describe ingress
|
||||
```
|
||||
|
||||
如果 Ingress 对象已就绪,但是 SSL 仍然无法正常工作,你的证书或密文的格式可能不正确。
|
||||
If its ready and the SSL is still not working you may have a malformed cert or secret.
|
||||
|
||||
这种情况下,请检查 nginx-ingress-controller 的日志。nginx-ingress-controller 的 Pod 中有多个容器,因此你需要指定容器的名称:
|
||||
Check the `traefik` logs.
|
||||
|
||||
```
|
||||
kubectl -n ingress-nginx logs -f nginx-ingress-controller-rfjrq nginx-ingress-controller
|
||||
...
|
||||
W0705 23:04:58.240571 7 backend_ssl.go:49] error obtaining PEM from secret cattle-system/tls-rancher-ingress: error retrieving secret cattle-system/tls-rancher-ingress: secret cattle-system/tls-rancher-ingress was not found
|
||||
kubectl -n traefik logs
|
||||
```
|
||||
|
||||
## 没有匹配的 "Issuer"
|
||||
@@ -144,7 +142,7 @@ Error: validation failed: unable to recognize "": no matches for kind "Issuer" i
|
||||
|
||||
解决网络问题后,`canal` Pod 会超时并重启以建立连接。
|
||||
|
||||
## nginx-ingress-controller Pod 显示 RESTARTS
|
||||
## Traefik Pod 显示 RESTARTS
|
||||
|
||||
此问题的最常见原因是 `canal` pod 未能建立覆盖网络。参见 [canal Pod 显示 READY `2/3`](#canal-pod-显示-ready-23) 进行排查。
|
||||
|
||||
|
||||
+1
-4
@@ -6,10 +6,7 @@ title: TLS 设置
|
||||
|
||||
## 在高可用 Kubernetes 集群中运行 Rancher
|
||||
|
||||
当你在 Kubernetes 集群内安装 Rancher 时,TLS 会在集群的 Ingress Controller 上卸载。可用的 TLS 设置取决于使用的 Ingress Controller:
|
||||
|
||||
* nginx-ingress-controller(RKE1 和 RKE2 默认):[默认的 TLS 版本和密码](https://kubernetes.github.io/ingress-nginx/user-guide/tls/#default-tls-version-and-ciphers)。
|
||||
* traefik(K3s 默认):[TLS 选项](https://doc.traefik.io/traefik/https/tls/#tls-options)。
|
||||
When you install a Rancher managed Kubernetes cluster, TLS is offloaded at the cluster's ingress controller. Traefik is the default ingress for K3s and can be used with RKE2, refer to [TLS Options](https://doc.traefik.io/traefik/https/tls/#tls-options) for further information.
|
||||
|
||||
## 在单个 Docker 容器中运行 Rancher
|
||||
|
||||
|
||||
Reference in New Issue
Block a user