通過在Service的Yaml文件中配置注解Annotation，您可以對天翼云負載均衡、監聽轉發等進行配置，本文介紹LoadBalancer類型Service支持配置的Annotation。

注解說明

健康檢查字段數據結構說明

使用已有負載均衡

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"  #負載均衡ELB實例的ID
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

創建私網負載均衡

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-spec: "elb.s2.small"  #新建負載均衡規格為標準型Ⅰ
    service.beta.kubernetes.io/ctyun-loadbalancer-address-type: "intranet"  #新建負載均衡為私網類型
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

新建公網負載均衡

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-spec: "elb.s2.small"  #新建負載均衡規格為標準型Ⅰ
    service.beta.kubernetes.io/ctyun-loadbalancer-address-type: "internet"  #新建負載均衡為公網類型
    service.beta.kubernetes.io/ctyun-loadbalancer-charge-type: "bandwidth"  #公網計費按帶寬計費
    service.beta.kubernetes.io/ctyun-loadbalancer-bandwidth: "5"  #公網帶寬大小為5Mbps
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

配置監聽HTTP協議

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "lb-***"
    service.beta.kubernetes.io/ctyun-loadbalancer-protocol-port: "http:80"  #監聽HTTP的80端口
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

配置監聽HTTPS協議

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-protocol-port: "https:443"  #監聽HTTPS的443端口
    service.beta.kubernetes.io/ctyun-loadbalancer-ssl-cert: "${YOUR_CERT_ID}"  #SSL證書ID
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 443
      targetPort: 80
  type: LoadBalancer

配置附加X-Forwarded-For請求頭

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-xforwardedfor: "true"
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

配置全局健康檢查

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-flag: "on"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-option: '{
      "protocol":"TCP",
      "interval":"5",
      "timeout":"10",
      "maxRetry":"3"
    }'
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
    - protocol: TCP
      port: 90
      targetPort: 90
  type: LoadBalancer

配置部分端口健康檢查

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-flag: "on"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-options: '[
      {
        "servicePort":"TCP:90",  #指定監聽協議為TCP、服務端口為90的端口配置
        "protocol":"TCP",        #指定健康檢查協議為TCP
        "interval":"5",
        "timeout":"10",
        "maxRetry":"3"
      },
      {
        "servicePort":"TCP:80",  #指定監聽協議為TCP、服務端口為80的端口配置
        "protocol":"HTTP",       #指定健康檢查協議為HTTP
        "interval":"5",
        "timeout":"10",
        "maxRetry":"3",
        "path":"/healthz",
        "expectedCodes":"http_2xx"
      },
    ]'
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
    - protocol: TCP
      port: 90
      targetPort: 90
  type: LoadBalancer

配置訪問控制黑/白名單

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-acl-flag: "white"         #白名單控制
    service.beta.kubernetes.io/ctyun-loadbalancer-acl-status: "on"          #開啟訪問控制
    service.beta.kubernetes.io/ctyun-loadbalancer-acl-id: "${YOUR_ACL_ID}"  #ELB的訪問策略組ID
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

為TCP監聽配置Proxy Protocol協議

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-proxy-protocol-flag: "on"
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer