{"id":44417,"date":"2022-12-14T17:47:16","date_gmt":"2023-10-13T06:27:27","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/"},"modified":"2024-04-29T05:16:20","modified_gmt":"2024-04-28T21:16:20","slug":"%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/","title":{"rendered":"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406"},"content":{"rendered":"<p>\u4f60\u597d\u3002\u6211\u662fkwashi\u3002\u4eca\u5929\u6211\u4ecb\u7ecd\u4e00\u4e0b\u6211\u4f7f\u7528SPA\u524d\u7aef\u548cAPI\u670d\u52a1\u5668\u7684\u7ec4\u5408\u6784\u5efa\u7684\u7cfb\u7edf\u3002\u4e4b\u524d\u7684\u5de5\u4f5c\u4e2d\uff0c\u7531\u4e8e\u5728\u5355\u4f53\u7cfb\u7edf\u4e2d\u6dfb\u52a0\u5927\u89c4\u6a21\u529f\u80fd\u800c\u9047\u5230\u4e86\u56f0\u96be\uff0c\u56e0\u6b64\u6211\u5728\u5b9e\u65bd\u8fc7\u7a0b\u4e2d\u6ce8\u91cd\u529f\u80fd\u548c\u7ed3\u6784\u7684\u5206\u79bb\u3002\u5982\u679c\u4f60\u60f3\u53c2\u8003Ambassador\u6216k8s\u7684\u6e05\u5355\uff0c\u8bf7\u770b\u6587\u7ae0\u7684\u540e\u534a\u90e8\u5206\u3002<\/p>\n<p>\u203b \u6211\u4eec\u5f00\u53d1\u7684\u7cfb\u7edf\u5e76\u4e0d\u662f\u4e3a\u4e86\u63d0\u4f9b\u67d0\u79cd\u670d\u52a1\u89c4\u8303\uff0c\u800c\u662f\u4e3a\u4e86\u8fdb\u884c\u6280\u672f\u9a8c\u8bc1\u548c\u7ec4\u5408\u4f5c\u4e3a\u6295\u8d44\u7ec4\u5408\u7684\u76ee\u7684\u800c\u521b\u5efa\u7684\u3002<\/p>\n<p>SPA\u662f\u4e3a\u4e86\u907f\u514d\u5728\u670d\u52a1\u5668\u7aef\u8fdb\u884cHTML\u6e32\u67d3\uff0c\u800c\u5c06\u670d\u52a1\u5668\u7aef\u7684\u89d2\u8272\u5b8c\u5168\u59d4\u6258\u7ed9API\u670d\u52a1\u5668\u800c\u4f7f\u7528\u7684\u3002\u6bcf\u4e2aAPI\u90fd\u901a\u8fc7\u5bb9\u5668\u5316\u6765\u8fdb\u884c\u5206\u79bb\uff0c\u901a\u8fc7\u5bb9\u5668\u7ba1\u7406\u5de5\u5177\u6765\u7ba1\u7406\u5404\u4e2a\u670d\u52a1\uff0c\u4ee5\u4fbf\u5b9e\u73b0\u6613\u4e8e\u6269\u5c55\u548c\u90e8\u7f72\u3002\u6b64\u5916\uff0c\u6211\u4eec\u8fd8\u4f7f\u7528API\u7f51\u5173\u6765\u8def\u7531\u6d41\u5411\u5404\u4e2aAPI\u7684\u6d41\u91cf\u3002<\/p>\n<p>\u5982\u679c\u6309\u7167\u4e0a\u8ff0\u7ed3\u6784\u6765\u8bbe\u8ba1\uff0c\u7531\u4e8e\u5728API\u670d\u52a1\u5668\u548c\u524d\u7aef\u4e24\u8005\u90fd\u9700\u8981\u5b89\u5168\u5730\u5b9e\u65bd\u8ba4\u8bc1\u529f\u80fd\uff0c\u8fd9\u6837\u5f88\u9ebb\u70e6\u3002 \u56e0\u6b64\uff0c\u6211\u4eec\u5c06\u4f7f\u7528\u540d\u4e3aFirebase Authentication\u7684\u8ba4\u8bc1\u57fa\u7840\u8bbe\u65bd\u6765\u8fdb\u884c\u8ba4\u8bc1\u3002<\/p>\n<p>\u7531\u4e8e\u5728\u6280\u672f\u5b9e\u65bd\u65b9\u9762\u5b58\u5728\u8bb8\u591a\u4e0e\u5176\u4ed6\u6587\u7ae0\u91cd\u590d\u7684\u5185\u5bb9\uff0c\u56e0\u6b64\u672c\u6587\u51c6\u5907\u4ecb\u7ecd\u53e6\u4e00\u7bc7Qiita\u6587\u7ae0\uff0c\u5305\u62ec\u76f8\u5173\u53c2\u8003\u8d44\u6599\u3002\u7136\u540e\uff0c\u672c\u6587\u5c06\u63cf\u8ff0\u7cfb\u7edf\u6982\u8ff0\u3001k8s\u7ba1\u7406\u6280\u5de7\u4ee5\u53caAPI Gateway\u5927\u4f7f\u7684\u914d\u7f6e\u6587\u4ef6\u3002<\/p>\n<p>\u5728\u8fd9\u6b21\u7684\u5b9e\u73b0\u4e2d\uff0c\u6211\u4eec\u5c06\u4e0e\u6570\u636e\u5e93\u8bbf\u95ee\u76f8\u5173\u7684\u90e8\u5206\u8fdb\u884c\u4e86\u9694\u79bb\uff0c\u5e76\u4e14\u7701\u7565\u4e86\u4e0e\u6570\u636e\u5e93\u76f8\u5173\u7684\u5b9e\u73b0\u3002<\/p>\n<p>git\uff1a\uff08k-washi\/example-k8s-ambassador\uff09[https:\/\/github.com\/k-washi\/example-k8s-ambassador] \u7684 GitHub \u94fe\u63a5\u3002<\/p>\n<h1>\u7cfb\u7edf\u6982\u8ff0 (x\u00ec sh\u00f9)<\/h1>\n<div><img decoding=\"async\" class=\"post-images\" title=\"\" src=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d58a937434c4406ce1423\/8-0.png\" alt=\"overview2.png\" \/><\/div>\n<p>\u6309\u7167\u56fe\u793a\uff0c\u5ba2\u6237\u7aef\u4f7f\u7528Vue\uff0c\u5e76\u7531Nginx\u8c03\u7528\u3002API\u670d\u52a1\u5668\u7531k8s\u7ba1\u7406\uff0c\u5176\u4e2d\u5305\u542b\u4e0d\u9700\u8981\u8ba4\u8bc1\u7684REST-API1\u548c\u9700\u8981JWT\u9a8c\u8bc1\u7684REST-API2\uff0c\u4ee5\u53ca\u7528\u4e8eJWT\u9a8c\u8bc1\u7684JWT-AutoO DockerImage\u3002<br \/>\n\u6b64\u5916\uff0c\u8fd8\u4f7f\u7528Ambassador\u4f5c\u4e3aAPI\u7f51\u5173\u6765\u8fdb\u884c\u8def\u7531\u63a7\u5236\u3002<\/p>\n<p>\u5728\u5ba2\u6237\u7aef\u4e0a\uff0c\u4e0eFirebase\u8fdb\u884c\u6574\u5408\uff0c\u5b9e\u73b0\u4e86\u767b\u5f55\u3001\u7528\u6237\u6ce8\u518c\u3001\u83b7\u53d6\u548c\u66f4\u65b0\u7528\u6237\u4fe1\u606f\u7684\u529f\u80fd\u3002<br \/>\n\u6b64\u5916\uff0c\u5728REST-API1\u4e2d\uff0c\u63d0\u4f9b\u4e86\u901a\u8fc7\u7b80\u5355\u7684JSON\u8fdb\u884cGET\u548cPOST\u7684\u529f\u80fd\u3002<br \/>\nREST-API2\u4f5c\u4e3a\u57fa\u4e8e\u7528\u6237\u4fe1\u606f\u7684\u670d\u52a1\u63d0\u4f9b\u7684\u793a\u4f8b\uff0c\u63d0\u4f9b\u4e86\u6d89\u53caJWT\u4f9d\u8d56\u7684\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743\u7684\u7528\u6237\u4fe1\u606f\u3002REST-API2\u7684\u8eab\u4efd\u9a8c\u8bc1\u548c\u6388\u6743\u901a\u8fc7gRPC\u5c06JWT\u53d1\u9001\u7ed9JWT-AuthO\uff0c\u5e76\u5728JWT-AuthO\u4e0eFirebase\u8fdb\u884c\u6574\u5408\u540e\u8fdb\u884cJWT\u7684\u9a8c\u8bc1\u3002<br \/>\n\u540c\u65f6\uff0c\u5c06\u8bc1\u660e\u90e8\u5206\u4fdd\u5b58\u5728JWT\u4e2d\u4e0e\u7528\u6237ID\u5173\u8054\uff0c\u5e76\u5728\u8ba4\u8bc1\u65f6\u8fdb\u884c\u786e\u8ba4\u662f\u5426\u4e3a\u65b0\u53d1\u884c\u7684JWT\u3002<\/p>\n<p>\u57fa\u672c\u4e0a\uff0c\u4f7f\u7528JWT\u7684\u60c5\u51b5\u4e0b\uff0c\u4e5f\u6709\u89c2\u70b9\u8ba4\u4e3a\u91cd\u8981\u6570\u636e\u4e0d\u5e94\u8be5\u88ab\u7ba1\u7406\u3002\u56e0\u6b64\uff0c\u5f53\u5ba2\u6237\u7aef\u4e0eFirebase\u8fde\u63a5\u5e76\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u65f6\uff0c\u9644\u4e0a\u65b0\u83b7\u5f97\u7684JWT\u5e76\u8bbf\u95ee\u670d\u52a1\u5668\u65f6\uff0cJWT-AuthO\u4f1a\u8bc6\u522b\u51fa\u8be5\u8bf7\u6c42\u5904\u4e8e\u8ba4\u8bc1\u72b6\u6001\uff0c\u5e76\u4e14\u65e0\u8bbaJWT\u662f\u5426\u662f\u6700\u65b0\u7684\uff0c\u53ea\u8981JWT\u88ab\u53d1\u9001\u8fc7\u6765\u5c31\u4f1a\u88ab\u8ba4\u4e3a\u662f\u6388\u6743\u72b6\u6001\u3002<br \/>\n\u6362\u53e5\u8bdd\u8bf4\uff0c\u5f53\u9700\u8981\u8bbf\u95ee\u91cd\u8981\u6570\u636e\u65f6\uff0c\u5ba2\u6237\u7aef\u59cb\u7ec8\u4f1a\u8fdb\u884c\u4e0eFirebase\u8fde\u63a5\u7684\u8eab\u4efd\u9a8c\u8bc1\u3002<br \/>\n\uff08\u5173\u4e8e\u8fd9\u4e2aJWT\u7684\u95ee\u9898\uff0c\u6211\u8ba4\u4e3a\u9700\u8981\u8fdb\u884c\u8ba8\u8bba&#8230;\uff09<\/p>\n<p>API \u7f51\u5173\u63a7\u5236\u4ee5\u4e0b\u8def\u7531\u3002\u6b64\u5916\uff0c\u6bcf\u4e2a API \u7684 Docker \u955c\u50cf\u548c Git \u5982\u4e0b\u6240\u793a\u3002<br \/>\n\u203b API \u7f51\u5173\u7aef\u53e3\u5df2\u8bbe\u7f6e\u4e3a30000\u3002<\/p>\n<pre class=\"post-pre\"><code>- path: <span class=\"s2\">\"\/:80\"<\/span>\r\n - image: kwashizaki\/example-vue-cli\r\n - git: https:\/\/github.com\/k-washi\/example-vue-cli.git\r\n - msg:vue\u306b\u3088\u308a\u69cb\u7bc9\u3057\u305f\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\r\n\r\n\r\n- paths: <span class=\"o\">[<\/span><span class=\"s2\">\"\/api\/ex-golang\/rest-api\/\"<\/span>, <span class=\"s2\">\"\/api\/ex-golang\/health\/\"<\/span><span class=\"o\">]<\/span>\r\n - image: kwashizaki\/example-golang-rest-api\r\n - git: https:\/\/github.com\/k-washi\/example-golang-rest-api.git\r\n - msg: REST-API1\u304c\u63d0\u4f9b\u3059\u308bAPI<span class=\"o\">(<\/span>GET, POST\u3067\u6587\u3092\u63d0\u4f9b\u3001\u4fdd\u5b58, &amp; health\u3067status 200\u3092\u8fd4\u7b54<span class=\"o\">)<\/span>\r\n\r\n- paths: <span class=\"o\">[<\/span><span class=\"s2\">\"\/api\/ex-jwt\/jwt\/ex-jwt-auth\"<\/span>, <span class=\"s2\">\"\/api\/ex-jwt\/auth\/ex-authentication\"<\/span><span class=\"o\">]<\/span>\r\n - images: kwashizaki\/example-golang-jwt-auth-client:v1.0.0\r\n - git: https:\/\/github.com\/k-washi\/example-golang-jwt-auth\/tree\/master\/testApp\r\n - msg: REST-API2\u304c\u63d0\u4f9b\u3059\u308bJWT-AuthO\u306b\u3088\u308bJWT\u691c\u8a3c\u3092\u4f34\u3046\u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u306e\u63d0\u4f9b\r\n\r\n- paths: <span class=\"o\">[<\/span><span class=\"s2\">\"\/ex-jwt-sr\/\"<\/span><span class=\"o\">]<\/span> <span class=\"c\">#gRPC<\/span>\r\n - image: kwashizaki\/example-golang-jwt-auth-server:v1.0.0\r\n - git: https:\/\/github.com\/k-washi\/example-golang-jwt-auth\r\n - msg: JWT-AuthO\u306b\u304a\u3051\u308bJWT\u691c\u8a3c<span class=\"o\">(<\/span> gRPC\u30b5\u30fc\u30d0\u30fc<span class=\"o\">)<\/span>\r\n<\/code><\/pre>\n<h1>\u6280\u672f\u4f7f\u7528\u6982\u8ff0<\/h1>\n<p>\u63a5\u4e0b\u6765\uff0c\u6211\u5c06\u4ecb\u7ecd\u4f7f\u7528\u7684\u6280\u672f\u3002\u8bf7\u53c2\u8003\u6211\u4e4b\u524d\u5199\u7684\u6587\u7ae0\u4e2d\u7684\u94fe\u63a5\u3002<br \/>\n\u6211\u4e2a\u4eba\u975e\u5e38\u559c\u6b22Golang\u7684\u6587\u7ae0\uff0c\u4e00\u5b9a\u8981\u770b\u4e00\u4e0b\u54e6\uff01<\/p>\n<h2>Vue.js \u662f\u4e00\u79cd\u6d41\u884c\u7684JavaScript \u6846\u67b6\u3002<\/h2>\n<p>\u73b0\u5728\u662fJavaScript\u6846\u67b6\u4e2d\u5f88\u53d7\u6b22\u8fce\u7684\u4e00\u79cd\u3002\u4e2a\u4eba\u800c\u8a00\uff0c\u6211\u89c9\u5f97\u5b66\u4e60Redux-saga\u4f5c\u4e3aReact\u7684\u5f02\u6b65\u5904\u7406\u65b9\u5f0f\u7684\u6210\u672c\u5f88\u9ad8\uff0c\u540c\u65f6Vue.js\u7684\u4f7f\u7528\u611f\u89c9\u4e5f\u66f4\u597d\uff0c\u6240\u4ee5\u6211\u9009\u62e9\u4e86Vue.js\u3002<br \/>\n\u6211\u4f7f\u7528Vue.js\u6765\u521b\u5efa\u524d\u7aef\u7684\u5355\u9875\u9762\u5e94\u7528\uff08SPA\uff09\u3002\u5728\u8def\u7531\u65b9\u9762\u4f7f\u7528\u4e86vue-router\uff0c\u5728\u7ba1\u7406\u5168\u5c40\u72b6\u6001\uff0c\u5982\u7528\u6237\u540d\u7b49\u65b9\u9762\u4f7f\u7528\u4e86Vuex\uff0c\u5728UI\u7ec4\u4ef6\u6846\u67b6\u65b9\u9762\u4f7f\u7528\u4e86Vuetify\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"c\"># vue --version<\/span>\r\n3.10.0\r\n<\/code><\/pre>\n<p>\u57fa\u672c\u4e0a\uff0c\u6211\u6b63\u5728\u4f7f\u7528\u5df2\u64f4\u5c55\u7684\u5be6\u73fe\u65b9\u6cd5\uff0c\u8a72\u65b9\u6cd5\u57fa\u65bc\u4ee5\u4e0b\u6211\u904e\u53bb\u7684\u6587\u7ae0\u3002\uff08Git: https:\/\/github.com\/k-washi\/example-vue-cli.git\uff09<br \/>\nQiita\uff1a\u4f7f\u7528Vue.js\uff08\u5305\u62ecVuex\u3001vue-router\u548cvuetify\uff09\u548cFirebase\u958b\u59cb\u9032\u884c\u7528\u6236\u7ba1\u7406\u3002<\/p>\n<h2>Go\u8bed\u8a00<\/h2>\n<p>\u6211\u4e00\u76f4\u4f7f\u7528Python\uff0c\u4f46\u60f3\u5c1d\u8bd5\u4e00\u4e0b\u9759\u6001\u7c7b\u578b\u8bed\u8a00\uff0c\u6240\u4ee5\u9009\u62e9\u4e86\u6700\u8fd1\u6d41\u884c\u7684Golang\u4f5c\u4e3a\u540e\u7aef\u8bed\u8a00\u3002<br \/>\n\u5b83\u5f88\u5bb9\u6613\u7f16\u5199\u5e76\u884c\u5904\u7406\u4ee3\u7801\uff0c\u5e76\u4e14\u6709\u5f3a\u5927\u7684\u6807\u51c6\u5305\u652f\u6301\u3002<br \/>\n\u5728\u8fd9\u4e2a\u7cfb\u7edf\u4e2d\uff0c\u6211\u4eec\u5c06\u6bcf\u4e2a\u670d\u52a1\u90fd\u8fdb\u884c\u4e86\u5bb9\u5668\u5316\uff0c\u8fd9\u6837\u53ef\u4ee5\u8f7b\u677e\u5b9e\u73b0\u5bb9\u5668\u7684\u8f7b\u91cf\u5316\u3002<\/p>\n<p>\u4f8b\u5982\uff0c\u8be5\u6b21\u4f7f\u7528Golang\u5f00\u53d1\u7684\u670d\u52a1\u53ef\u4ee5\u4ee5\u7ea620MB\u5927\u5c0f\u8fdb\u884cDocker\u5bb9\u5668\u5316\uff0c\u5177\u4f53\u5982\u4e0b\u3002<\/p>\n<pre class=\"post-pre\"><code>REPOSITORY                                  TAG                 IMAGE ID            CREATED             SIZE\r\nkwashizaki\/example-golang-jwt-auth-server   v1.0.0              4cf9b4595b01        7 hours ago         23.9MB\r\nkwashizaki\/example-golang-jwt-auth-client   v1.0.0              baa4bce6c5fe        44 hours ago        24.5MB\r\nkwashizaki\/example-golang-rest-api          v1.0.0              8d92d819d8ad        8 days ago          22.6MB\r\n<\/code><\/pre>\n<p>\u53e6\u5916\uff0c\u4f5c\u4e3aWeb\u6846\u67b6\uff0c\u6211\u4eec\u4f7f\u7528\u4e86\u8f7b\u91cf\u7b80\u6d01\u7684gin\u3002<\/p>\n<p>\u672c\u7cfb\u7edf\u7684API\u57fa\u672c\u4e0a\u662f\u6309\u7167\u6211\u4e4b\u524d\u7f16\u5199\u7684\u9996\u4e2aGolang Web\u5e94\u7528\u7a0b\u5e8f\u7684\u67b6\u6784\uff0c\u4e00\u76f4\u5230\u6d4b\u8bd5\u548cDocker\u5bb9\u5668\u5316\u90fd\u4fdd\u6301\u76f8\u540c\u7684\u5b9e\u73b0\u65b9\u5f0f\u3002<\/p>\n<h2>Firebase is a cloud-based platform that provides services for developing and managing mobile and web applications.<\/h2>\n<p>Firebase\u662f\u7531Google\u63d0\u4f9b\u7684MBaas\uff08\u79fb\u52a8\u540e\u7aef\u5373\u670d\u52a1\uff09\u4e4b\u4e00\u3002\u5b83\u5177\u6709\u6570\u636e\u5e93\u548c\u8ba4\u8bc1\u529f\u80fd\uff0c\u5728\u672c\u7cfb\u7edf\u4e2d\uff0c\u6211\u4eec\u4f7f\u7528\u4e86\u8ba4\u8bc1\u529f\u80fdFirebase Authentication\u3002\u5728\u5174\u8da3\u7231\u597d\u7684\u7a0b\u5ea6\u4e0a\uff0c\u53ef\u4ee5\u514d\u8d39\u4f7f\u7528\u3002<\/p>\n<p>Firebase Authentication\u5728\u524d\u7aef\u8ba4\u8bc1\u5b8c\u6210\u540e\u4f1a\u8fd4\u56deJWT\uff08Json Web Token\uff09\u3002<br \/>\n\u670d\u52a1\u5668\u53ef\u4ee5\u4f7f\u7528\u524d\u7aef\u53d1\u9001\u7684JWT\u6765\u9a8c\u8bc1Firebase\uff0c\u5224\u65ad\u662f\u5426\u4e3a\u6709\u6548\u7684JWT\u3002<br \/>\n\u6362\u53e5\u8bdd\u8bf4\uff0c\u670d\u52a1\u5668\u53ef\u4ee5\u4f7f\u7528JWT\u6765\u9a8c\u8bc1\u662f\u5426\u4e3a\u5df2\u767b\u5f55\u7684\u7528\u6237\u3002<\/p>\n<p>\u5728\u670d\u52a1\u5668\u7aef\uff0c\u9700\u8981\u5b9a\u4e49\u4e00\u4e2a\u540d\u4e3aex-firebase-auth-firebase-adminsdk-xxxx.json\u7684\u6587\u4ef6\uff0c\u8be5\u6587\u4ef6\u5305\u542b\u9a8c\u8bc1\u6240\u9700\u7684\u53c2\u6570\u3002\u8fd9\u662f\u7531Firebase SDK\u63d0\u4f9b\u7684\u3002<\/p>\n<p>\u53e6\u5916\uff0c\u4f7f\u7528Golang\u8fdb\u884c\u5b9e\u73b0\uff0c\u91c7\u7528\u4e86\u300cVue.js + Go\u8bed\u8a00 + Firebase\u300d\u7684\u5f00\u53d1\u65b9\u5f0f\uff01\u53c2\u8003\u4e86\u5728\u524d\u7aef\u548c\u540e\u7aefAPI\u90fd\u8fdb\u884c\u5b89\u5168\u8ba4\u8bc1\u7684SPA\u5f00\u53d1\u5b9e\u8df5\uff01<\/p>\n<h2>\u4f7f\u7528\u4e2d\u6587\u9032\u884c\u4e00\u500b\u9078\u9805\u7684\u91cd\u65b0\u8ff0\u8aaa\u662f:<\/h2>\n<p>JSON Web\u4ee4\u724c (JWT)<\/p>\n<p>\u8fd9\u662f\u4e00\u4e2a\u6309\u7167\u4ee5\u4e0b\u683c\u5f0f\u6784\u6210\u7684\u5b57\u7b26\u4e32\u3002<\/p>\n<pre class=\"post-pre\"><code><span class=\"o\">{<\/span>base64\u30a8\u30f3\u30b3\u30fc\u30c9\u3057\u305fhead\uff11er<span class=\"o\">}<\/span>.<span class=\"o\">{<\/span>base64\u30a8\u30f3\u30b3\u30fc\u30c9\u3057\u305fclaims<span class=\"o\">}<\/span>.<span class=\"o\">{<\/span>\u7f72\u540d<span class=\"o\">}<\/span>\r\n<\/code><\/pre>\n<p>Firebase\u662f\u672c\u6b21\u53d1\u5e03\u7684\u53d1\u884c\u8005\uff0c\u53ef\u4ee5\u4f7f\u7528\u5bc6\u94a5\u5bf9JSON\u8fdb\u884c\u7b7e\u540d\uff0c\u4ee5\u5c06\u5176\u4f5c\u4e3a\u4ee4\u724c\u5904\u7406\u3002\u6b64\u5916\uff0c\u53ef\u4ee5\u4f7f\u7528\u5bc6\u94a5\u8fdb\u884c\u9a8c\u8bc1\u4ee5\u4fa6\u6d4b\u6539\u8fdb\u3002<br \/>\n\u5728claims\u90e8\u5206\u4e2d\uff0c\u53ef\u4ee5\u5305\u542b\u4efb\u610f\u7684\u4fe1\u606f\uff0c\u5982\u7528\u6237\u540d\u3002<\/p>\n<p>\u6211\u521b\u5efa\u4e86\u4e00\u4e2a\u5e93\uff0c\u540d\u4e3ak-washi\/jwt-decode\uff0c\u7528\u4e8e\u89e3\u6790JWT\u5e76\u63d0\u53d6\u5176\u4e2d\u7684claims\u90e8\u5206\uff0c\u7136\u540e\u89e3\u7801Firebase\u4e2d\u7684\u4fe1\u606f\u3002<\/p>\n<p>Qiita\uff1a\u4f7f\u7528Golang\u8fdb\u884cFirebase\u8eab\u4efd\u9a8c\u8bc1\u4e2dJWT\u89e3\u6790<\/p>\n<h2>nginx -&gt; nginx<\/h2>\n<p>\u4e00\u79cd\u7528\u4e8e\u64cd\u4f5c\u7cfb\u7edf\u3001\u5e94\u7528\u8f6f\u4ef6\u548c\u5e94\u7528\u4e4b\u95f4\u7684\u4e2d\u95f4\u4ef6\uff0c\u7528\u4e8e\u5728\u53d1\u9001HTTP\u8bf7\u6c42\u7b49\u65f6\u8fd4\u56de\u54cd\u5e94\u7684Web\u670d\u52a1\u5668\u8f6f\u4ef6\u3002\u5b83\u5177\u6709\u53cd\u5411\u4ee3\u7406\u548c\u8d1f\u8f7d\u5747\u8861\u529f\u80fd\uff0c\u5e76\u4e14\u76f8\u8f83\u4e8eApache\uff0c\u5177\u6709\u66f4\u5feb\u901f\u548c\u9ad8\u5f3a\u5ea6\u7684\u9644\u52a0\u529f\u80fd\u3002<\/p>\n<p>\u6211\u5011\u4f7f\u7528Web\u4f3a\u670d\u5668\u4f5c\u70ba\u5206\u767cSPA\u7684\u5e73\u53f0\u3002<\/p>\n<p>Qiita: Vue.js\u9879\u76ee\u4e2dnginx\u914d\u7f6e\u548c\u4f7f\u7528Docker\u5bb9\u5668\u5316\u7684\u793a\u4f8b<\/p>\n<h2>gRPC \u533a\u5757\u94fe\u3002<\/h2>\n<p>gRPC\u662fGoogle\u5f00\u53d1\u7684\u4e00\u79cd\u534f\u8bae\uff0c\u7528\u4e8e\u5b9e\u73b0\u8fdc\u7a0b\u8fc7\u7a0b\u8c03\u7528\uff08RPC\uff09\u3002\u5b83\u4f7f\u7528Protocol Buffers\u6765\u5bf9\u6570\u636e\u8fdb\u884c\u5e8f\u5217\u5316\uff0c\u5177\u6709\u5b9e\u73b0\u9ad8\u901f\u901a\u4fe1\u7684\u7279\u70b9\u3002\u5173\u4e8egRPC\uff0c\u53c2\u8003\u4e86\u201cgRPC\u662f\u4ec0\u4e48\uff1f\u201d\u8fd9\u7bc7\u6587\u7ae0\u3002<\/p>\n<p>\u672c\u7cfb\u7edf\u4e2d\uff0c\u5728\u540e\u7aef\u4f7f\u7528\u4e86\u670d\u52a1\u4e4b\u95f4\u7684\u901a\u4fe1\u3002<\/p>\n<p>QIITA\uff1a\u4f7f\u7528Golang\u5f00\u59cbgRPC<\/p>\n<h2>Docker<\/h2>\n<p>\u901a\u8fc7\u5229\u7528\u4e3b\u673a\u7684\u5185\u6838\u8fdb\u884c\u9694\u79bb\uff0c\u4f8b\u5982\u9694\u79bb\u8fdb\u7a0b\u548c\u7528\u6237\uff0c\u4f7f\u5176\u770b\u8d77\u6765\u50cf\u662f\u5728\u8fd0\u884c\u53e6\u4e00\u53f0\u673a\u5668\u3002\u56e0\u6b64\uff0c\u53ef\u4ee5\u8f7b\u677e\u3001\u5feb\u901f\u5730\u542f\u52a8\u3001\u505c\u6b62\u865a\u62df\u73af\u5883\u3002<\/p>\n<p>\u6211\u5728\u4e4b\u524d\u5199\u7684\u4e00\u7bc7\u9898\u4e3a\u300a\u6211\u7684\u7b2c\u4e00\u4e2aGolang Web\u5e94\u7528\u7a0b\u5e8f\uff1a\u4ece\u6d4b\u8bd5\u5230Docker\u5bb9\u5668\u5316\u300b\u7684\u6587\u7ae0\u4e2d\u4ecb\u7ecd\u4e86\u5982\u4f55\u5c06Golang\u5e94\u7528\u7a0b\u5e8f\u5bb9\u5668\u5316\u4e3aDocker\u3002<\/p>\n<p>\u4ee5\u4e0b\u662f\u672c\u6b21\u4f7f\u7528\u7684DockerImage\u3002<\/p>\n<pre class=\"post-pre\"><code>REPOSITORY                                  TAG                 IMAGE ID            CREATED             SIZE\r\nkwashizaki\/example-vue-cli                  v1.0.0              7d1f0394bec3        2 hours ago         25.3MB\r\nkwashizaki\/example-golang-jwt-auth-server   v1.0.0              4cf9b4595b01        7 hours ago         23.9MB\r\nkwashizaki\/example-golang-jwt-auth-client   v1.0.0              baa4bce6c5fe        44 hours ago        24.5MB\r\nkwashizaki\/example-golang-rest-api          v1.0.0              8d92d819d8ad        8 days ago          22.6MB\r\nquay.io\/datawire\/ambassador                 0.83.0              d8caf63d933c        3 weeks ago         691MB\r\n<\/code><\/pre>\n<h2>Kubernetes\uff08K8s\uff09<\/h2>\n<p>\u8fd9\u662f\u4e00\u4e2a\u8bbe\u8ba1\u7528\u4e8e\u81ea\u52a8\u90e8\u7f72\u3001\u6269\u5c55\u548c\u5e94\u7528\u5bb9\u5668\u7684\u64cd\u4f5c\u81ea\u52a8\u5316\u7684\u5f00\u6e90\u5e73\u53f0\u3002<br \/>\n\u5728\u672c\u6587\u4e2d\uff0c\u6211\u4eec\u5c06\u4ecb\u7ecd\u8fd9\u4e2a\u7cfb\u7edf\u7684k8s\u914d\u7f6e\u65b9\u6cd5\u3002<\/p>\n<h2>\u5927\u4f7f<\/h2>\n<p>\u4ece\u516c\u5f0f\u4e2d\u53ef\u4ee5\u5f97\u77e5<\/p>\n<p>\u5927\u4f7f\u662f\u7528\u4e8e\u5fae\u670d\u52a1\u7684API\u7f51\u5173\u3002<\/p>\n<h3>\u529f\u80fd<\/h3>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">AWS APIGateway\u306e\u3088\u3046\u306aAPIGateway\u306e\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u6a5f\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">Kong\u306e\u3088\u3046\u306a\u4f1d\u7d71\u7684\u306aAPIGateway\u6a5f\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Nginx\u3084, Envoy, k8s\u306eIngress\u306e\u3088\u3046\u306aProxy\u6a5f\u80fd<\/ul>\n<h3>\u8be6\u7ec6\u529f\u80fd<\/h3>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u7d30\u304b\u306a\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u5236\u5fa1\u3001\u6b63\u898f\u8868\u73fe\u30d9\u30fc\u30b9\u306e\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3001\u30db\u30b9\u30c8\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u306a\u3069\u304c\u53ef\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u8a8d\u8a3c<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">gRPC, HTTP\/2\u3092\u30b5\u30dd\u30fc\u30c8<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30ab\u30ca\u30ea\u30a2\u30ea\u30ea\u30fc\u30b9<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30b7\u30e3\u30c9\u30fc\u30c8\u30e9\u30c3\u30ad\u30f3\u30b0\u6a5f\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\u7279\u5b9a\u30b5\u30fc\u30d3\u30b9\u3078\u306eL7\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u900f\u904e\u7684\u306a\u76e3\u8996<\/ul>\n<h3>\u4ece\u8fd0\u7ef4\u4eba\u5458\u7684\u89d2\u5ea6\u6765\u770b<\/h3>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3068\u30b9\u30b1\u30fc\u30ea\u30f3\u30b0\u3092Envoy\u3068Kubernetes\u306b\u4f9d\u5b58\u3057\u3066\u3044\u308b\u306e\u3067\u3001\u5c55\u958b\u3068\u64cd\u4f5c\u304c\u7c21\u5358<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">TLSTermination\u3068\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3092\u5e83\u7bc4\u56f2\u306b\u904b\u7528\u53ef\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30c8\u30e9\u30d6\u30eb\u30b7\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u6642\u306b\u7d71\u5408\u7684\u306b\u8a3a\u65ad\u3059\u308b\u4e8b\u304c\u53ef\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u8907\u6570\u306e\u7570\u306a\u308b\u30d0\u30fc\u30b8\u30e7\u30f3\u306eAmbassador\u3092\u904b\u7528\u51fa\u6765\u3066\u3001\u7c21\u5358\u306b\u30c6\u30b9\u30c8\u3001\u66f4\u65b0\u3059\u308b\u4e8b\u304c\u53ef\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">Istio\u3068\u9023\u643a\u3057\u3066\u30b5\u30fc\u30d3\u30b9\u30e1\u30c3\u30b7\u30e5\u5316\u304c\u53ef\u80fd<\/ul>\n<h3>\u5185\u90e8\u5b9e\u73b0<\/h3>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">k8s\u3092\u6700\u5927\u9650\u306b\u5229\u7528\u3057\u3001\u4fe1\u983c\u6027(reliability), \u53ef\u7528\u6027(availability), \u30b9\u30b1\u30fc\u30e9\u30d3\u30ea\u30c6\u30a3(scalability)\u3092\u62c5\u4fdd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u72b6\u614b\u7ba1\u7406\u306e\u70ba\u306b\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u3088\u3046\u306a\u30b9\u30c8\u30ec\u30fc\u30b8\u3092\u5fc5\u8981\u3068\u305b\u305a\u3001Kubernetes\u5185\u306b\u5168\u3066\u306e\u72b6\u614b\u7ba1\u7406\u3092\u7dad\u6301<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">\n<li style=\"list-style-type: none;\">\n<ul class=\"post-ul\">\u30b9\u30b1\u30fc\u30eb\u6642\u306f\u3001k8s\u306eReplicaset\u3067\u30ec\u30d7\u30ea\u30ab\u6570\u3092\u5909\u66f4\u3059\u308b\u304b\u3001horizontal pod autoscaler\u3092\u5229\u7528\u3059\u308b\u4e8b\u3067\u7c21\u5358\u306b\u30b9\u30b1\u30fc\u30eb\u4e8b\u304c\u53ef\u80fd<\/ul>\n<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul class=\"post-ul\">EnvoyProxy\u3092\u4f7f\u7528\u3057\u3066\u3001\u5168\u3066\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3068\u30d7\u30ed\u30ad\u30b7\u30fc\u3092\u5b9f\u884c<\/ul>\n<h1>\u7a0b\u5e8f\u53ca\u5176\u7248\u672c<\/h1>\n<pre class=\"post-pre\"><code><span class=\"c\"># go version<\/span>\r\ngo version go1.12.7 darwin\/amd64\r\n\r\n<span class=\"c\"># docker -v<\/span>\r\nDocker version 19.03.2, build 6a30dfc\r\n\r\n<span class=\"c\"># kubectl version<\/span>\r\n<span class=\"o\">&gt;<\/span>lient Version: version.Info<span class=\"o\">{<\/span>Major:<span class=\"s2\">\"1\"<\/span>, Minor:<span class=\"s2\">\"14\"<\/span>, GitVersion:<span class=\"s2\">\"v1.14.6\"<\/span>, GitCommit:<span class=\"s2\">\"96fac5cd13a5dc064f7d9f4f23030a6aeface6cc\"<\/span>, GitTreeState:<span class=\"s2\">\"clean\"<\/span>, BuildDate:<span class=\"s2\">\"2019-08-19T11:13:49Z\"<\/span>, GoVersion:<span class=\"s2\">\"go1.12.9\"<\/span>, Compiler:<span class=\"s2\">\"gc\"<\/span>, Platform:<span class=\"s2\">\"darwin\/amd64\"<\/span><span class=\"o\">}<\/span>\r\nServer Version: version.Info<span class=\"o\">{<\/span>Major:<span class=\"s2\">\"1\"<\/span>, Minor:<span class=\"s2\">\"14\"<\/span>, GitVersion:<span class=\"s2\">\"v1.14.6\"<\/span>, GitCommit:<span class=\"s2\">\"96fac5cd13a5dc064f7d9f4f23030a6aeface6cc\"<\/span>, GitTreeState:<span class=\"s2\">\"clean\"<\/span>, BuildDate:<span class=\"s2\">\"2019-08-19T11:05:16Z\"<\/span>, GoVersion:<span class=\"s2\">\"go1.12.9\"<\/span>, Compiler:<span class=\"s2\">\"gc\"<\/span>, Platform:<span class=\"s2\">\"linux\/amd64\"<\/span><span class=\"o\">}<\/span>\r\n\r\n<span class=\"c\"># vue --version<\/span>\r\n3.10.0\r\n<\/code><\/pre>\n<h1>k8s\u6e05\u5355\u6587\u4ef6<\/h1>\n<p>\u672c\u7ae0\u5c06\u542f\u52a8\u4ee5\u4e0b\u7684pod\u3001service\u548cdeployments\u3002<br \/>\n\u5982\u60a8\u6240\u89c1\uff0c\u8be5\u670d\u52a1\u5728localhost:30000\u4e0a\u8bbe\u6709External IP\u3002<br \/>\n\u53e6\u4e00\u65b9\u9762\uff0c<\/p>\n<pre class=\"post-pre\"><code>kubectl get pods\r\nNAME                          READY   STATUS    RESTARTS   AGE\r\nambassador-55d75bc95b-29ckv   1\/1     Running   0          3m59s\r\nambassador-55d75bc95b-2lxzv   1\/1     Running   0          3m27s\r\nambassador-55d75bc95b-9vjnz   1\/1     Running   0          2m18s\r\nex-go-5c5747dbdb-ddkpx        1\/1     Running   1          5d21h\r\nex-jwt-cl-576556588d-7sdgc    1\/1     Running   1          5d21h\r\nex-jwt-sr-78bdf9f4d4-6dmft    1\/1     Running   1          5d21h\r\n\r\nkubectl get svc\r\nNAME               TYPE           CLUSTER-IP       EXTERNAL-IP   PORT<span class=\"o\">(<\/span>S<span class=\"o\">)<\/span>           AGE\r\nambassador         LoadBalancer   10.97.238.197    localhost     30000:30685\/TCP   5d21h\r\nambassador-admin   NodePort       10.103.162.214   &lt;none&gt;        8877:31915\/TCP    5d21h\r\nex-go              ClusterIP      10.101.114.104   &lt;none&gt;        8080\/TCP          5d21h\r\nex-jwt-cl          ClusterIP      10.106.203.56    &lt;none&gt;        8080\/TCP          5d21h\r\nex-jwt-sr          ClusterIP      10.99.209.88     &lt;none&gt;        8080\/TCP          5d21h\r\nkubernetes         ClusterIP      10.96.0.1        &lt;none&gt;        443\/TCP           92d\r\n\r\nkubectl get deployment\r\nNAME         READY   UP-TO-DATE   AVAILABLE   AGE\r\nambassador   3\/3     3            3           5d22h\r\nex-go        1\/1     1            1           5d22h\r\nex-jwt-cl    1\/1     1            1           5d22h\r\nex-jwt-sr    1\/1     1            1           5d22h\r\n<\/code><\/pre>\n<h2>\u79d8\u5bc6\u529f\u80fd<\/h2>\n<p>\u4f7f\u7528k8s\u7684\u79d8\u5bc6\u529f\u80fd\uff0c\u8bbe\u7f6eFirebase\u914d\u7f6e\u6587\u4ef6\u7b49\u673a\u5bc6\u4fe1\u606f\uff0c\u4ee5\u9632\u6cc4\u9732\u3002<\/p>\n<pre class=\"post-pre\"><code>google_app_creds=\/tmp\/ex-firebase-auth-firebase-adminsdk-xxxxxxx.json\r\n<\/code><\/pre>\n<p>\u521b\u5efa\u6587\u4ef6<\/p>\n<pre class=\"post-pre\"><code>kubectl create secret generic <span class=\"nt\">--save-config<\/span> firebase-secret <span class=\"nt\">--from-env-file<\/span> .\/env\/env-secret.txt\r\n\r\n\r\n<\/code><\/pre>\n<p>\u8bf7\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u8bfb\u53d6\u6587\u4ef6\u914d\u7f6e\u3002<br \/>\n\u786e\u8ba4:<\/p>\n<pre class=\"post-pre\"><code>kubectl get secret\r\n<span class=\"c\">#NAME                     TYPE                                  DATA   AGE<\/span>\r\n<span class=\"c\">#firebase-secret          Opaque                                1      5d21h<\/span>\r\n<\/code><\/pre>\n<p>\u5f53\u5728\u6b64\u5904\u5c06\u6587\u4ef6\u8def\u5f84\u8bbe\u7f6e\u4e3aDockerImage\u90e8\u7f72\u65f6\uff0c\u5c06\u590d\u5236Firebase SDK\u7684\u914d\u7f6e\u6587\u4ef6\u3002<\/p>\n<h2>API Gateway Ambassador\u7684\u914d\u7f6e<\/h2>\n<p>\u4f7f\u7528 k8s \u8fdb\u884c RBAC \u7ba1\u7406\u5404\u79cd\u8d44\u6e90\u7684\u8bbf\u95ee\u6743\u9650\u3002\u5047\u8bbe\u542f\u7528\u4e86\u8be5\u529f\u80fd\uff0c\u6211\u4eec\u53ef\u4ee5\u5b89\u88c5\u5b98\u65b9\u63d0\u4f9b\u7684\u6e05\u5355\u6587\u4ef6\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl apply <span class=\"nt\">-f<\/span> https:\/\/getambassador.io\/yaml\/ambassador\/ambassador-rbac.yaml\r\n<\/code><\/pre>\n<p>\u6211\u4eec\u5c06\u5b9e\u9645\u4f7f\u7528\u7684\u7a0b\u5e8f\u653e\u5728\u4e86Git\u7684example-k8s-ambassador\/ambassador\/ambassador-rbac.yaml\u3002<\/p>\n<p>\u57fa\u672c\u7684\u6765\u8bf4\uff0c<br \/>\n1. \u901a\u8fc7ClusterRoleBinding\u5c06\u540d\u4e3aambassador\u7684\u670d\u52a1\u8d26\u53f7\u548c\u670d\u52a1\u7b49\u6388\u4e88\u6743\u9650\u7684ClusterRole\u8fdb\u884c\u5173\u8054\u3002<br \/>\n2. \u4f7f\u7528\u5bb9\u5668ambassador\u521b\u5efa\u5177\u6709\u7aef\u53e3\u53f7(http:80\uff0cadmin:8877)\u7684Deployment\uff0c\u5e76\u8bbe\u7f6e\u526f\u672c\u6570\u4e3a3\u3002<br \/>\n3. \u521b\u5efa\u4e00\u4e2a\u670d\u52a1\uff0c\u5e76\u5c06\u7aef\u53e3(admin:8877)\u5173\u8054\u5230NodoPort\u4e0a\u3002<\/p>\n<p>\u7531\u4e8e\u521b\u5efa\u4e86\u4e00\u4e2aService\u4f5c\u4e3aNodePort\uff0c\u6240\u4ee5\u4ee5\u4e0b\u914d\u7f6e\u4e86LoadBalancer\u3002<br \/>\nHTTP\u7aef\u53e3\u88ab\u8986\u76d6\u4e3a30000\uff0c\u5e76\u5c06\u5bb9\u5668\u63a5\u53d7\u7684\u7aef\u53e3\u8bbe\u7f6e\u4e3a8080\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl apply <span class=\"nt\">-f<\/span> ambassador\/ambassador-service.yaml \r\n\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"nn\">---<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Service<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ambassador<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">LoadBalancer<\/span>\r\n  <span class=\"c1\">#externalTrafficPolicy: Local<\/span>\r\n  <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n   <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">http<\/span>\r\n     <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">30000<\/span>\r\n     <span class=\"na\">targetPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">service<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ambassador<\/span>\r\n<\/code><\/pre>\n<h2>\u914d\u7f6e\u5730\u56fe<\/h2>\n<p>\u6211\u5728k8s\u5185\u8bbe\u7f6e\u4e86\u8981\u4f7f\u7528\u7684\u53d8\u91cf\u3002<br \/>\n\u63a5\u4e0b\u6765\uff0c\u6211\u5c06\u90e8\u7f72\u6bcf\u4e2a\u670d\u52a1\uff0c\u5c06\u8fd9\u4e9b\u53d8\u91cf\u7528\u4f5c\u90e8\u7f72\u65f6\u7684\u53c2\u6570\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl apply <span class=\"nt\">-f<\/span> example-golang-vue\/example-jwt-config.yaml\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ConfigMap<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-map<\/span>\r\n<span class=\"na\">data<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"s\">origin.host<\/span><span class=\"pi\">:<\/span> <span class=\"s\">localhost<\/span>\r\n  <span class=\"c1\">#\u6570\u5b57\u306f, \"\"\u3067\u56f2\u3080<\/span>\r\n  <span class=\"s\">origin.port<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">80\"<\/span>\r\n  <span class=\"s\">ambassador.host<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr<\/span>\r\n  <span class=\"s\">ambassador.port<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">8080\"<\/span>\r\n  <span class=\"s\">jwtserver.host<\/span><span class=\"pi\">:<\/span> <span class=\"s\">localhost<\/span>\r\n  <span class=\"s\">jwtserver.port<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">50051\"<\/span>\r\n<\/code><\/pre>\n<h2>\u5bb9\u5668\u90e8\u7f72<\/h2>\n<p>\u5728getambassador.io\/config\u4e0a\u8fdb\u884c\u4e86\u8def\u7531\u914d\u7f6e\u3002<br \/>\n\u5728\u90a3\u91cc\uff0c\u901a\u8fc7Ambassador\u8fdb\u884c\u914d\u7f6e\uff0c\u5c06\u5176\u8bbe\u7f6e\u4e3a\u4f7f\u7528http:\/\/ex-go:8080\u8fdb\u884c\u8bf7\u6c42\u3002<br \/>\n\u8fd9\u4e2aex-go\u662f\u6839\u636eDeployment\u8fdb\u884c\u5339\u914d\u7684\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl apply <span class=\"nt\">-f<\/span> example-golang-vue\/example-golang.yaml \r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Service<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-go<\/span>\r\n  <span class=\"na\">annotations<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"s\">getambassador.io\/config<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">|<\/span>\r\n      <span class=\"s\">---<\/span>\r\n      <span class=\"s\">apiVersion: ambassador\/v0<\/span>\r\n      <span class=\"s\">kind:  Mapping<\/span>\r\n      <span class=\"s\">name:  ex-health-map<\/span>\r\n      <span class=\"s\">prefix: \/api\/ex-golang<\/span>\r\n      <span class=\"s\">service: http:\/\/ex-go:8080<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ClusterIP<\/span>\r\n  <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">cl-ip-ex-go<\/span>\r\n    <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n    <span class=\"na\">targetPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-go<\/span>\r\n\r\n<span class=\"nn\">---<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">apps\/v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Deployment<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-go<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">replicas<\/span><span class=\"pi\">:<\/span> <span class=\"m\">1<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">matchLabels<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-go<\/span>\r\n  <span class=\"na\">strategy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">RollingUpdate<\/span>\r\n  <span class=\"na\">template<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">labels<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-go<\/span>\r\n    <span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">containers<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-go-ui<\/span>\r\n        <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kwashizaki\/example-golang-rest-api:v1.0.0<\/span>\r\n        <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-go<\/span>\r\n          <span class=\"na\">containerPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n        <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span>\r\n          <span class=\"na\">limits<\/span><span class=\"pi\">:<\/span>\r\n            <span class=\"na\">cpu<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">0.1\"<\/span>\r\n            <span class=\"na\">memory<\/span><span class=\"pi\">:<\/span> <span class=\"s\">100Mi<\/span>\r\n<\/code><\/pre>\n<p>\u4ed6\u7684\u670d\u52a1\u5c06\u90e8\u7f72\u6e05\u5355\u4e5f\u90e8\u7f72\u3002\u5176\u4ed6\u670d\u52a1\u4e5f\u4f7f\u7528\u4e0e\u4e0a\u8ff0\u6e05\u5355\u76f8\u540c\u7684\u8bbe\u7f6e\u3002<br \/>\n\u4f5c\u4e3a\u5bb9\u5668\u5185\u7684\u73af\u5883\u53d8\u91cf\uff0c\u5b83\u4eec\u88ab\u914d\u7f6e\u5728env\u4e0b\u9762\u3002<\/p>\n<p>\u53e6\u5916\uff0c\u5728\u90e8\u7f72\u65f6\uff0c\u901a\u8fc7\u5c06\u5377\u4e0b\u7684\u8def\u5f84\u6587\u4ef6\u590d\u5236\u5230\u5377\u6302\u8f7d\u7684\u8def\u5f84\u4e0a\uff0c\u6765\u8fdb\u884cFirebase\u8bbe\u7f6e\u3002<br \/>\n\u8fd9\u6837\u4e00\u6765\uff0c\u5c31\u4e0d\u518d\u9700\u8981\u5728Docker\u955c\u50cf\u4e2d\u5305\u542b\u9700\u8981\u4fdd\u5bc6\u7684\u914d\u7f6e\u6587\u4ef6\u4e86\u3002<\/p>\n<p>\u5173\u4e8egRPC\uff0c\u8def\u7531\u63a7\u5236\u975e\u5e38\u7279\u6b8a\uff0c\u4e0d\u9700\u8981\u7f16\u5199getambassador.io\/config\u670d\u52a1\u7684ex-jwt-sr\u65b9\u6848\u3002<br \/>\n\u6b64\u5916\uff0c\/jwtauth.JwtService\/\u5728\u4e00\u4e2a\u5c06gRPC\u534f\u8bae\u8f6c\u6362\u4e3agolang\u7684\u6587\u4ef6\u4e2d\u6709\u6240\u8bb0\u5f55\u3002<\/p>\n<pre class=\"post-pre\"><code>kubectl apply <span class=\"nt\">-f<\/span> example-golang-vue\/example-jwt-server.yaml\r\nkubectl apply <span class=\"nt\">-f<\/span> example-golang-vue\/example-jwt-client.yaml\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Service<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-cl<\/span>\r\n  <span class=\"na\">annotations<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"s\">getambassador.io\/config<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">|<\/span>\r\n      <span class=\"s\">---<\/span>\r\n      <span class=\"s\">apiVersion: ambassador\/v0<\/span>\r\n      <span class=\"s\">kind:  Mapping<\/span>\r\n      <span class=\"s\">name:  ex-jwt-cl<\/span>\r\n      <span class=\"s\">prefix: \/api\/ex-jwt<\/span>\r\n      <span class=\"s\">service: http:\/\/ex-jwt-cl:8080<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ClusterIP<\/span>\r\n  <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">cl-ip-ex-jwt<\/span>\r\n    <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n    <span class=\"na\">targetPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-cl<\/span>\r\n\r\n<span class=\"nn\">---<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">extensions\/v1beta1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Deployment<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-cl<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">replicas<\/span><span class=\"pi\">:<\/span> <span class=\"m\">1<\/span>\r\n  <span class=\"na\">strategy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">RollingUpdate<\/span>\r\n  <span class=\"na\">template<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">labels<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-cl<\/span>\r\n    <span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">containers<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-ui<\/span>\r\n        <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kwashizaki\/example-golang-jwt-auth-client:v1.0.0<\/span>\r\n        <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-cl<\/span>\r\n          <span class=\"na\">containerPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n        <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span>\r\n          <span class=\"na\">limits<\/span><span class=\"pi\">:<\/span>\r\n            <span class=\"na\">cpu<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">0.1\"<\/span>\r\n            <span class=\"na\">memory<\/span><span class=\"pi\">:<\/span> <span class=\"s\">100Mi<\/span>\r\n        <span class=\"na\">env<\/span><span class=\"pi\">:<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ORIGIN_HOST<\/span>\r\n            <span class=\"na\">valueFrom<\/span><span class=\"pi\">:<\/span>\r\n              <span class=\"na\">configMapKeyRef<\/span><span class=\"pi\">:<\/span>\r\n                <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-map<\/span>\r\n                <span class=\"na\">key<\/span><span class=\"pi\">:<\/span> <span class=\"s\">origin.host<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ORIGIN_PORT<\/span>\r\n            <span class=\"na\">valueFrom<\/span><span class=\"pi\">:<\/span>\r\n              <span class=\"na\">configMapKeyRef<\/span><span class=\"pi\">:<\/span>\r\n                <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-map<\/span>\r\n                <span class=\"na\">key<\/span><span class=\"pi\">:<\/span> <span class=\"s\">origin.port<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">AMBASSADORHOST<\/span>\r\n            <span class=\"na\">valueFrom<\/span><span class=\"pi\">:<\/span>\r\n              <span class=\"na\">configMapKeyRef<\/span><span class=\"pi\">:<\/span>\r\n                <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-map<\/span>\r\n                <span class=\"na\">key<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ambassador.host<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">PORT<\/span>\r\n            <span class=\"na\">valueFrom<\/span><span class=\"pi\">:<\/span>\r\n              <span class=\"na\">configMapKeyRef<\/span><span class=\"pi\">:<\/span>\r\n                <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-map<\/span>\r\n                <span class=\"na\">key<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ambassador.port<\/span>\r\n<\/code><\/pre>\n<pre class=\"post-pre\"><code><span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Service<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr<\/span>\r\n  <span class=\"na\">annotations<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"s\">getambassador.io\/config<\/span><span class=\"pi\">:<\/span> <span class=\"pi\">|<\/span>\r\n      <span class=\"s\">---<\/span>\r\n      <span class=\"s\">apiVersion: ambassador\/v0<\/span>\r\n      <span class=\"s\">kind:  Mapping<\/span>\r\n      <span class=\"s\">name:  ex-jwt<\/span>\r\n      <span class=\"s\">grpc: True<\/span>\r\n      <span class=\"s\">prefix: \/jwtauth.JwtService\/<\/span>\r\n      <span class=\"s\">rewrite: \/jwtauth.JwtService\/<\/span>\r\n      <span class=\"s\">service: ex-jwt-sr<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ClusterIP<\/span>\r\n  <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">cl-ip-ex-jwt-sr<\/span>\r\n    <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">8080<\/span>\r\n    <span class=\"na\">targetPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">50051<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr<\/span>\r\n\r\n<span class=\"nn\">---<\/span>\r\n<span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">apps\/v1<\/span>\r\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Deployment<\/span>\r\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr<\/span>\r\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n  <span class=\"na\">replicas<\/span><span class=\"pi\">:<\/span> <span class=\"m\">1<\/span>\r\n  <span class=\"na\">selector<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">matchLabels<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr<\/span>\r\n  <span class=\"na\">strategy<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">type<\/span><span class=\"pi\">:<\/span> <span class=\"s\">RollingUpdate<\/span>\r\n  <span class=\"na\">template<\/span><span class=\"pi\">:<\/span>\r\n    <span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">labels<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"na\">app<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr<\/span>\r\n    <span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"na\">containers<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr<\/span>\r\n        <span class=\"na\">image<\/span><span class=\"pi\">:<\/span> <span class=\"s\">kwashizaki\/example-golang-jwt-auth-server:v1.0.0<\/span>\r\n        <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\r\n        <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-sr-api<\/span>\r\n          <span class=\"na\">containerPort<\/span><span class=\"pi\">:<\/span> <span class=\"m\">50051<\/span>\r\n        <span class=\"na\">resources<\/span><span class=\"pi\">:<\/span>\r\n          <span class=\"na\">limits<\/span><span class=\"pi\">:<\/span>\r\n            <span class=\"na\">cpu<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">0.1\"<\/span>\r\n            <span class=\"na\">memory<\/span><span class=\"pi\">:<\/span> <span class=\"s\">100Mi<\/span>\r\n        <span class=\"na\">env<\/span><span class=\"pi\">:<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">AMBASSADORHOST<\/span>\r\n            <span class=\"na\">valueFrom<\/span><span class=\"pi\">:<\/span>\r\n              <span class=\"na\">configMapKeyRef<\/span><span class=\"pi\">:<\/span>\r\n                <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-map<\/span>\r\n                <span class=\"na\">key<\/span><span class=\"pi\">:<\/span> <span class=\"s\">jwtserver.host<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">PORT<\/span>\r\n            <span class=\"na\">valueFrom<\/span><span class=\"pi\">:<\/span>\r\n              <span class=\"na\">configMapKeyRef<\/span><span class=\"pi\">:<\/span>\r\n                <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ex-jwt-map<\/span>\r\n                <span class=\"na\">key<\/span><span class=\"pi\">:<\/span> <span class=\"s\">jwtserver.port<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">GOOGLE_APPLICATION_CREDENTIALS<\/span>\r\n            <span class=\"na\">valueFrom<\/span><span class=\"pi\">:<\/span>\r\n              <span class=\"na\">secretKeyRef<\/span><span class=\"pi\">:<\/span>\r\n                <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">firebase-secret<\/span>\r\n                <span class=\"na\">key<\/span><span class=\"pi\">:<\/span> <span class=\"s\">google_app_creds<\/span>\r\n        <span class=\"na\">volumeMounts<\/span><span class=\"pi\">:<\/span>\r\n          <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">firebase-creds<\/span>\r\n            <span class=\"na\">mountPath<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/tmp<\/span> <span class=\"c1\">#firebase-auth-cred\u30d5\u30a1\u30a4\u30eb\u3092\u7f6e\u304f\u5834\u6240<\/span>\r\n            <span class=\"na\">readOnly<\/span><span class=\"pi\">:<\/span> <span class=\"no\">true<\/span>\r\n      <span class=\"na\">volumes<\/span><span class=\"pi\">:<\/span>\r\n      <span class=\"pi\">-<\/span> <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">firebase-creds<\/span>\r\n        <span class=\"na\">hostPath<\/span><span class=\"pi\">:<\/span>\r\n          <span class=\"na\">path<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/Users\/washizakikai\/DevLocal\/git\/kwashi\/example-k8s-ambassador\/env<\/span>\r\n\r\n\r\n<\/code><\/pre>\n<h1>\u603b\u7ed3<\/h1>\n<p>\u5728\u8fd9\u91cc\uff0c\u6211\u4eec\u5c55\u793a\u4e86\u4f7f\u7528Kubernetes\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406\u548cAPI Gateway\uff08\u5373ambassador\uff09\u7684\u8bbe\u7f6e\uff0c\u5e76\u4e14\u5c55\u793a\u4e86\u4e00\u4e2a\u6f14\u793a\u5fae\u670d\u52a1\u4e4b\u95f4\u534f\u4f5c\u7684\u793a\u4f8b\u3002<br \/>\n\u4e3a\u4e86\u907f\u514d\u4e0e\u5176\u4ed6\u7684Qiita\u6587\u7ae0\u91cd\u590d\uff0c\u5e76\u7740\u91cd\u8bf4\u660e\u4e86\u4e0eKubernetes\u6e05\u5355\u76f8\u5173\u7684\u5185\u5bb9\u3002<\/p>\n<p>\u5982\u679c\u60a8\u5bf9Vue\u6216Golang\u7684\u914d\u7f6e\u611f\u5230\u597d\u5947\uff0c\u8bf7\u52a1\u5fc5\u5728\u6587\u7ae0\u7684\u4e2d\u9014\u67e5\u770b\u6240\u53c2\u8003\u7684\u6587\u7ae0\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4f60\u597d\u3002\u6211\u662fkwashi\u3002\u4eca\u5929\u6211\u4ecb\u7ecd\u4e00\u4e0b\u6211\u4f7f\u7528SPA\u524d\u7aef\u548cAPI\u670d\u52a1\u5668\u7684\u7ec4\u5408\u6784\u5efa\u7684\u7cfb\u7edf\u3002\u4e4b\u524d\u7684\u5de5\u4f5c\u4e2d\uff0c\u7531\u4e8e\u5728\u5355\u4f53 [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-44417","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528k8s\u548capi-gateway\uff08ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406\u3002\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406\" \/>\n<meta property=\"og:description\" content=\"\u4f60\u597d\u3002\u6211\u662fkwashi\u3002\u4eca\u5929\u6211\u4ecb\u7ecd\u4e00\u4e0b\u6211\u4f7f\u7528SPA\u524d\u7aef\u548cAPI\u670d\u52a1\u5668\u7684\u7ec4\u5408\u6784\u5efa\u7684\u7cfb\u7edf\u3002\u4e4b\u524d\u7684\u5de5\u4f5c\u4e2d\uff0c\u7531\u4e8e\u5728\u5355\u4f53 [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528k8s\u548capi-gateway\uff08ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406\u3002\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-13T06:27:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-28T21:16:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d58a937434c4406ce1423\/8-0.png\" \/>\n<meta name=\"author\" content=\"\u79d1, \u96c5\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u79d1, \u96c5\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/\",\"name\":\"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-10-13T06:27:27+00:00\",\"dateModified\":\"2024-04-28T21:16:20+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a\",\"name\":\"\u79d1, \u96c5\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g\",\"caption\":\"\u79d1, \u96c5\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528k8s\u548capi-gateway\uff08ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406\u3002\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406","og_description":"\u4f60\u597d\u3002\u6211\u662fkwashi\u3002\u4eca\u5929\u6211\u4ecb\u7ecd\u4e00\u4e0b\u6211\u4f7f\u7528SPA\u524d\u7aef\u548cAPI\u670d\u52a1\u5668\u7684\u7ec4\u5408\u6784\u5efa\u7684\u7cfb\u7edf\u3002\u4e4b\u524d\u7684\u5de5\u4f5c\u4e2d\uff0c\u7531\u4e8e\u5728\u5355\u4f53 [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528k8s\u548capi-gateway\uff08ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406\u3002\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-10-13T06:27:27+00:00","article_modified_time":"2024-04-28T21:16:20+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d58a937434c4406ce1423\/8-0.png"}],"author":"\u79d1, \u96c5","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u79d1, \u96c5","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"6 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/","name":"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-10-13T06:27:27+00:00","dateModified":"2024-04-28T21:16:20+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528k8s\u548cAPI Gateway\uff08Ambassador\uff09\u8fdb\u884c\u5bb9\u5668\u7ba1\u7406"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/41e222757cdd2a3365361328bd79970a","name":"\u79d1, \u96c5","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1b2d3e00a7df03689797ebd4af8c5827ba5af936849a71050ec331f4cf902c5d?s=96&d=mm&r=g","caption":"\u79d1, \u96c5"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keya\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8k8s%e5%92%8capi-gateway%ef%bc%88ambassador%ef%bc%89%e8%bf%9b%e8%a1%8c%e5%ae%b9%e5%99%a8%e7%ae%a1%e7%90%86%e3%80%82\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/44417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=44417"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/44417\/revisions"}],"predecessor-version":[{"id":83268,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/44417\/revisions\/83268"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=44417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=44417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=44417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}