OpenShift \u9ed8\u8ba4\u60c5\u51b5\u4e0b\u4e0d\u5141\u8bb8\u8fd0\u884c\u76d1\u542c\u7aef\u53e380\u7684\u5bb9\u5668\uff08\u6211\u6709\u70b9\u89c9\u5f97\u8fd9\u662f\u63071023\u4ee5\u4e0b\u7684\u4f17\u6240\u5468\u77e5\u7684\u7aef\u53e3\uff09\uff0c\u6211\u5c1d\u8bd5\u53bb\u8c37\u6b4c\u4e86\u4e00\u4e0b\uff0c\u4f46\u662f\u6ca1\u6709\u627e\u5230\u76f8\u5173\u4fe1\u606f\uff08\u627e\u4e0d\u5230\uff09\uff0c\u6240\u4ee5\u6211\u5c06\u518d\u6b21\u786e\u8ba4\u3002<\/p>\n
\u4f7f\u7528\u4ece\u4ee5\u4e0b\u5b58\u50a8\u5e93\u4e2d\u6784\u5efa\u7684\u5185\u5bb9<\/p>\n
<\/p>\n
\u8bf7\u6784\u5efa\u4ee5\u4e0b Dockerfile<\/p>\n
# FROM registry.access.redhat.com\/ubi8\/ubi:latest\r\nFROM redhat\/ubi8\r\nMAINTAINER \"yuhkih\" \r\n\r\nRUN dnf install -y nginx\r\nCOPY index.html \/usr\/share\/nginx\/html\/index.html\r\nCOPY nginx.conf \/etc\/nginx\/nginx.conf\r\n\r\nEXPOSE 80\r\n\r\nCMD [\"-g\",\"daemon off;\"]\r\nENTRYPOINT [\"nginx\"]\r\n<\/code><\/pre>\n\u5efa\u7b51<\/p>\n
docker build . -t yuhkih\/nginx-port80:latest \r\n<\/code><\/pre>\n\u5c06\u6587\u4ef6\u63a8\u9001\u5230Docker Hub<\/p>\n
docker push yuhkih\/nginx-port80 \r\n<\/code><\/pre>\n\u4ee5\u4e0a\u662f\u5b9e\u9a8c\u7528\u5bb9\u5668\u7684\u51c6\u5907\u5de5\u4f5c\u5df2\u5b8c\u6210\u3002<\/p>\n
\u8dd1 OpenShift \u529f\u80fd\u3002<\/h2>\n
\u521b\u5efa\u4e00\u4e2a\u65b0\u7684OpenShift\u9879\u76ee<\/p>\n
\u7528\u666e\u901a\u7528\u6237\u8eab\u4efd\u767b\u5f55\u3002<\/p>\n
oc login https:\/\/api.f5cluster.m51o.p1.openshiftapps.com:6443 -u yuhkih -p xxxxxxx \r\n<\/code><\/pre>\n\u5efa\u7acb\u4e00\u4e2a\u9879\u76ee\u3002<\/p>\n
oc new-project testp\r\n<\/code><\/pre>\n\u4f7f\u7528oc new-app\u90e8\u7f72\u5bb9\u5668\u3002<\/p>\n
oc new-app --image=docker.io\/yuhkih\/nginx-port80 -l=app=test\r\n<\/code><\/pre>\nPod \u51fa\u73b0\u9519\u8bef\u3002<\/p>\n
$ oc get pods\r\nNAME READY STATUS RESTARTS AGE\r\nnginx-port80-78f75798bc-qjftq 0\/1 CrashLoopBackOff 7 (5m2s ago) 15m\r\n$ \r\n<\/code><\/pre>\n\u67e5\u770b\u65e5\u5fd7\u3002\u6743\u9650\u88ab\u62d2\u7edd\u3002<\/p>\n
$ oc logs nginx-port80-78f75798bc-qjftq\r\n2023\/06\/26 02:43:10 [emerg] 1#0: bind() to 0.0.0.0:80 failed (13: Permission denied)\r\nnginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)\r\n$ \r\n<\/code><\/pre>\n\u7ed9\u4e88\u6743\u9650\u5e76\u8bd5\u7740\u8fd0\u884c\u4e00\u4e0b<\/h1>\n\u5728cluster-admin\u4e2d\u7684\u64cd\u4f5c<\/h2>\n
\u6211\u5011\u7684\u76ee\u6a19\u662f\u8b93\u53e6\u4e00\u500b\u7aef\u53e3\u9032\u884c\u76e3\u807d\uff0c\u4f46\u5728\u904b\u884c\u6642\u63d0\u4f9b\u5408\u9069\u7684\u5b89\u5168\u4e0a\u4e0b\u6587\u7d04\u675f\uff08Security Context Contrain\uff09\u4f86\u9032\u884c\u6e2c\u8a66\u3002<\/p>\n
\u5c07\u6b0a\u9650\u6388\u4e88\u9805\u76ee\u7684\u7ba1\u7406\u54e1\u662f\u96c6\u7fa4\u7ba1\u7406\u54e1\u7684\u5de5\u4f5c\uff0c\u56e0\u6b64\u6211\u5011\u5c07\u4f7f\u7528\u5177\u6709cluster-admin\u6b0a\u9650\u7684\u7528\u6236\u9032\u884c\u64cd\u4f5c\u3002<\/p>\n
Pod\u7684\u6743\u9650\u4e0e\u542f\u52a8Pod\u7684Service Account\u76f8\u5173\u8054\u3002\u5982\u679c\u4e0d\u505a\u4efb\u4f55\u64cd\u4f5c\uff0c\u9ed8\u8ba4\u4f7f\u7528\u540d\u4e3a”default”\u7684Service Account\u8fd0\u884c\u3002<\/p>\n
\u9996\u5148\uff0c\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u670d\u52a1\u5e10\u6237\u6765\u8fd0\u884c\u6b64 Pod\u3002<\/p>\n
\u7528 cluster-admin \u7528\u6237\u767b\u5f55\u3002<\/p>\n
oc login https:\/\/api.f5cluster.m51o.p1.openshiftapps.com:6443 -u cluster-admin -p xxxxxxx \r\n<\/code><\/pre>\n\u5c06\u5f53\u524d\u5de5\u7a0b\u5207\u6362\u5230testp\u9879\u76ee\u4e2d\u3002<\/p>\n
oc project testp\r\n<\/code><\/pre>\n\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a testsa \u7684\u670d\u52a1\u8d26\u6237\u3002<\/p>\n
oc create sa testsa\r\n<\/code><\/pre>\n\u7ed9\u670d\u52a1\u8d26\u6237\u5206\u914d SCC \u7684\u4efb\u610f\u6743\u9650\u3002<\/p>\n
$ oc adm policy add-scc-to-user anyuid -z testsa\r\nclusterrole.rbac.authorization.k8s.io\/system:openshift:scc:anyuid added: \"saport80\"\r\n$ \r\n<\/code><\/pre>\nSCC\u548cSA\u7684\u5173\u8054\u5728clusterrolebindings\u8d44\u6e90\u4e2d\u5b9a\u4e49\u3002\u4e0d\u592a\u76f4\u89c2\u3002<\/p>\n
$ oc describe clusterrolebindings system:openshift:scc:anyuid\r\nName: system:openshift:scc:anyuid\r\nLabels: <none>\r\nAnnotations: <none>\r\nRole:\r\n Kind: ClusterRole\r\n Name: system:openshift:scc:anyuid\r\nSubjects:\r\n Kind Name Namespace\r\n ---- ---- ---------\r\n ServiceAccount testsa testp\r\n$ \r\n<\/code><\/pre>\n\u5728\u9879\u76ee\u7ba1\u7406\u7528\u6237\u4e0a\u7684\u64cd\u4f5c<\/h2>\n
\u4ece\u8fd9\u91cc\u5f00\u59cb\uff0c\u4e0d\u8981\u4f7f\u7528 cluster-admin \u800c\u662f\u4f7f\u7528\u9879\u76ee\u7684\u7ba1\u7406\u7528\u6237\uff08\u5373\u9879\u76ee\u521b\u5efa\u8005\uff09\u8fdb\u884c\u64cd\u4f5c\u3002<\/p>\n
\u4ee5\u9879\u76ee\u521b\u5efa\u8005\u8eab\u4efd\u767b\u5f55\u3002<\/p>\n
oc login https:\/\/api.f5cluster.m51o.p1.openshiftapps.com:6443 -u yuhkih -p xxxxxxx \r\n<\/code><\/pre>\n\u786e\u8ba4\u4e00\u4e0b Deployment \u7684\u540d\u79f0\u3002(\u4f7f\u7528 oc new-app \u547d\u4ee4\u4f1a\u81ea\u52a8\u521b\u5efa\u4ee5\u4e0b\u7684 Deployment\uff0c\u5f88\u65b9\u4fbf\u3002)<\/p>\n
$ oc get deployment\r\nNAME READY UP-TO-DATE AVAILABLE AGE\r\nnginx-port80 0\/1 1 0 22m\r\n$ \r\n<\/code><\/pre>\n\u5c06\u5728\u90e8\u7f72\u4e2d\u521b\u5efa\u7684SA\u4e0esaport80\u5bc6\u5207\u5173\u8054\u3002<\/p>\n
oc set serviceaccount deployment nginx-port80 saport80\r\n<\/code><\/pre>\n\u786e\u8ba4\u5bb9\u5668\u5df2\u542f\u52a8\u3002\u80fd\u591f\u901a\u8fc7anyuid\u542f\u52a8\u3002<\/p>\n
$ oc get pods\r\nNAME READY STATUS RESTARTS AGE\r\nnginx-port80-54746447ff-n4k5t 0\/1 ContainerCreating 0 9s\r\nnginx-port80-78f75798bc-qjftq 0\/1 CrashLoopBackOff 11 (113s ago) 32m\r\n$ oc get pods\r\nNAME READY STATUS RESTARTS AGE\r\nnginx-port80-54746447ff-n4k5t 1\/1 Running 0 32s\r\n$ \r\n<\/code><\/pre>\n\u5c06\u5bb9\u5668\u516c\u5f00\u7684\u7aef\u53e3\u8fdb\u884c\u66f4\u6539\u662f\u5f88\u91cd\u8981\u7684\u3002\u5373\u4f7f\u5728\u5bb9\u5668\u7ea7\u522b\u8fdb\u884c\u66f4\u6539\uff0c\u4e5f\u53ef\u4ee5\u5c06\u7aef\u53e3\u8bbe\u7f6e\u4e3a80\/443\uff0c\u8fd9\u6837\u53ef\u4ee5\u51cf\u5c11\u540e\u7eed\u7684\u9ebb\u70e6\u3002<\/p>\n
\u9650\u5236-v2<\/h1>\n
SCC\u76ee\u524d\u670914\u79cd\u7c7b\u578b\u3002<\/p>\n
oc get scc\r\nNAME PRIV CAPS SELINUX RUNASUSER FSGROUP SUPGROUP PRIORITY READONLYROOTFS VOLUMES\r\nanyuid false <no value> MustRunAs RunAsAny RunAsAny RunAsAny 10 false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nhostaccess false <no value> MustRunAs MustRunAsRange MustRunAs RunAsAny <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"hostPath\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nhostmount-anyuid false <no value> MustRunAs RunAsAny RunAsAny RunAsAny <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"hostPath\",\"nfs\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nhostnetwork false <no value> MustRunAs MustRunAsRange MustRunAs MustRunAs <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nhostnetwork-v2 false [\"NET_BIND_SERVICE\"] MustRunAs MustRunAsRange MustRunAs MustRunAs <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nmachine-api-termination-handler false <no value> MustRunAs RunAsAny MustRunAs MustRunAs <no value> false [\"downwardAPI\",\"hostPath\"]\r\nnode-exporter true <no value> RunAsAny RunAsAny RunAsAny RunAsAny <no value> false [\"*\"]\r\nnonroot false <no value> MustRunAs MustRunAsNonRoot RunAsAny RunAsAny <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nnonroot-v2 false [\"NET_BIND_SERVICE\"] MustRunAs MustRunAsNonRoot RunAsAny RunAsAny <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\npcap-dedicated-admins false [\"NET_ADMIN\",\"NET_RAW\"] RunAsAny RunAsAny RunAsAny RunAsAny <no value> false [\"awsElasticBlockStore\",\"azureDisk\",\"azureFile\",\"cephFS\",\"cinder\",\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"fc\",\"flexVolume\",\"flocker\",\"gcePersistentDisk\",\"gitRepo\",\"glusterfs\",\"iscsi\",\"nfs\",\"persistentVolumeClaim\",\"photonPersistentDisk\",\"portworxVolume\",\"projected\",\"quobyte\",\"rbd\",\"scaleIO\",\"secret\",\"storageOS\",\"vsphere\"]\r\nprivileged true [\"*\"] RunAsAny RunAsAny RunAsAny RunAsAny <no value> false [\"*\"]\r\nrestricted false <no value> MustRunAs MustRunAsRange MustRunAs RunAsAny <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nrestricted-v2 false [\"NET_BIND_SERVICE\"] MustRunAs MustRunAsRange MustRunAs RunAsAny <no value> false [\"configMap\",\"csi\",\"downwardAPI\",\"emptyDir\",\"ephemeral\",\"persistentVolumeClaim\",\"projected\",\"secret\"]\r\nsplunkforwarder true [\"*\"] RunAsAny RunAsAny RunAsAny RunAsAny <no value> false [\"*\"]\r\n$ \r\n\r\n# \u5168\u90e8\u3067 14\u7a2e\u985e\u3042\u308b\r\n$ oc get scc | grep -v NAME | wc -l\r\n14\r\n$ \r\n<\/code><\/pre>\n\u5728 restricted-v2 \u4e2d\uff0c\u5982\u679c\u4ed4\u7ec6\u89c2\u5bdf\uff0c\u53ef\u4ee5\u6ce8\u610f\u5230 NET_BIND_SERVICE \u88ab\u6dfb\u52a0\u4e3a\u4e00\u9879\u6743\u9650\uff08Capability\uff09\u3002<\/p>\n
\u8fd9\u4e2a\u53d7\u9650\u5236\u7684v2\u7248\u672c\u662fOpenShift\u7684\u9ed8\u8ba4\u7248\u672c\uff0c\u6240\u4ee5\u6211\u4ee5\u4e3a\u65e0\u9700\u505a\u4efb\u4f55\u64cd\u4f5c\u5c31\u53ef\u4ee5\u542f\u52a8\u4e00\u4e2a\u76d1\u542c\u7aef\u53e380\u7684Pod\u3002\u4f46\u662f\u7531\u4e8e\u4e0b\u9762\u7684Kubernetes\u95ee\u9898\uff0c\u4f3c\u4e4e\u65e0\u6cd5\u76f4\u63a5\u8fd0\u884c\u3002<\/p>\n
<\/p>\n
\u4e2d\u8eab\u4e00\u770b\u5c31\u77e5\u9053\u7ecf\u5386\u4e86\u5f88\u957f\u65f6\u95f4\uff0c\u6240\u4ee5\u611f\u89c9\u4e0d\u4f1a\u5f88\u5bb9\u6613\u89e3\u51b3…<\/p>\n
\u5982\u679c\u60f3\u8981\u5141\u8bb8 NET_BIND_SERVICE \u64cd\u4f5c\uff0c\u53ef\u4ee5\u4f7f\u7528 spec.containers.securityContext.capabilities.add \u7b49\u5728 Deployment \u4e2d\u8fdb\u884c\u5b9a\u4e49\uff0c\u4ee5\u5b9e\u73b0\u6b64\u64cd\u4f5c\u3002<\/p>\n
<\u7701\u7565>\r\n app: test\r\n deployment: nginx-port80\r\n spec:\r\n containers:\r\n - image: docker.io\/yuhkih\/nginx-port80\r\n imagePullPolicy: IfNotPresent\r\n name: nginx-port80\r\n ports:\r\n - containerPort: 80\r\n protocol: TCP\r\n restartPolicy: Always\r\n schedulerName: default-scheduler\r\n securityContext:\r\n capabilities:\r\n add: [\"NET_BIND_SERVICE\"]\r\n<\u7701\u7565>\r\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"\u76ee\u6807 OpenShift \u9ed8\u8ba4\u60c5\u51b5\u4e0b\u4e0d\u5141\u8bb8\u8fd0\u884c\u76d1\u542c\u7aef\u53e380\u7684\u5bb9\u5668\uff08\u6211\u6709\u70b9\u89c9\u5f97\u8fd9\u662f\u63071023\u4ee5\u4e0b\u7684\u4f17\u6240\u5468\u77e5\u7684\u7aef\u53e3 […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-33098","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n
\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u786e\u8ba4\u5728openshift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542ctcp80\u7aef\u53e3\u7684\u5bb9\u5668\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668\" \/>\n<meta property=\"og:description\" content=\"\u76ee\u6807 OpenShift \u9ed8\u8ba4\u60c5\u51b5\u4e0b\u4e0d\u5141\u8bb8\u8fd0\u884c\u76d1\u542c\u7aef\u53e380\u7684\u5bb9\u5668\uff08\u6211\u6709\u70b9\u89c9\u5f97\u8fd9\u662f\u63071023\u4ee5\u4e0b\u7684\u4f17\u6240\u5468\u77e5\u7684\u7aef\u53e3 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u786e\u8ba4\u5728openshift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542ctcp80\u7aef\u53e3\u7684\u5bb9\u5668\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-30T13:37:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-28T14:23:36+00:00\" \/>\n<meta name=\"author\" content=\"\u97f5, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u97f5, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/\",\"name\":\"\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-08-30T13:37:00+00:00\",\"dateModified\":\"2024-04-28T14:23:36+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e\",\"name\":\"\u97f5, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g\",\"caption\":\"\u97f5, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u786e\u8ba4\u5728openshift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542ctcp80\u7aef\u53e3\u7684\u5bb9\u5668\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668","og_description":"\u76ee\u6807 OpenShift \u9ed8\u8ba4\u60c5\u51b5\u4e0b\u4e0d\u5141\u8bb8\u8fd0\u884c\u76d1\u542c\u7aef\u53e380\u7684\u5bb9\u5668\uff08\u6211\u6709\u70b9\u89c9\u5f97\u8fd9\u662f\u63071023\u4ee5\u4e0b\u7684\u4f17\u6240\u5468\u77e5\u7684\u7aef\u53e3 […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u786e\u8ba4\u5728openshift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542ctcp80\u7aef\u53e3\u7684\u5bb9\u5668\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-08-30T13:37:00+00:00","article_modified_time":"2024-04-28T14:23:36+00:00","author":"\u97f5, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u97f5, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"3 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/","name":"\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-08-30T13:37:00+00:00","dateModified":"2024-04-28T14:23:36+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u786e\u8ba4\u5728OpenShift\u4e0a\u65e0\u6cd5\u6b63\u5e38\u8fd0\u884c\u76d1\u542cTCP80\u7aef\u53e3\u7684\u5bb9\u5668"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/6530331a63adef3b3443a1fab53a0e6e","name":"\u97f5, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/429ccb39b3fff5188bc17986222cfb0936cbadb8cc933cff04ab5ca01bd30a08?s=96&d=mm&r=g","caption":"\u97f5, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/yunke\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e7%a1%ae%e8%ae%a4%e5%9c%a8openshift%e4%b8%8a%e6%97%a0%e6%b3%95%e6%ad%a3%e5%b8%b8%e8%bf%90%e8%a1%8c%e7%9b%91%e5%90%actcp80%e7%ab%af%e5%8f%a3%e7%9a%84%e5%ae%b9%e5%99%a8%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/33098","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=33098"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/33098\/revisions"}],"predecessor-version":[{"id":61434,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/33098\/revisions\/61434"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=33098"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=33098"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=33098"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}