K8s Ingress 服务返回 503，Pod 日志中没有任何内容

Question

我是运行一个 Ingress，它应该连接到我的 Pods 中的图像。当我做 describe 时它看起来不错，例如

$ kubectl describe svc solar-demo
Name:              solar-demo
Namespace:         default
Labels:            <none>
Annotations:       kubectl.kubernetes.io/last-applied-configuration={"apiVersion":"v1","kind":"Service","metadata":{"annotations":{},"name":"solar-demo","namespace":"default"},"spec":{"ports":[{"name":"city","port":3000...
Selector:          app=solardemo
Type:              ClusterIP
IP:                10.97.245.248
Port:              city  3000/TCP
TargetPort:        3000/TCP
Endpoints:         172.17.0.4:3000,172.17.0.6:3000
Port:              solar  3001/TCP
TargetPort:        3001/TCP
Endpoints:         172.17.0.4:3001,172.17.0.6:3001
Session Affinity:  None
Events:            <none>

它甚至可以正确列出我图片的 IP 地址。但是，当我尝试访问服务时，当我只请求根时得到 404，这很好，因为我没有将 map / 映射到任何东西，并且当我尝试访问路由时出现 503 错误 /solar and/or /city.

当我检查日志时，它 returns:

$ kubectl logs solar-demo-5845984b94-xp82l solar-svc
npm info it worked if it ends with ok
npm info using npm@5.6.0
npm info using node@v9.11.2
npm info lifecycle nf-images-test@1.0.0~prestart-solar-svc: nf-images-test@1.0.0
npm info lifecycle nf-images-test@1.0.0~start-solar-svc: nf-images-test@1.0.0

> nf-images-test@1.0.0 start-solar-svc /opt/app-root/src
> node solar-svc.js

{"level":30,"time":1530271233676,"msg":"Server listening at http://0.0.0.0:3001","pid":26,"hostname":"solar-demo-5845984b94-xp82l","v":1}
server listening on 3001

其他服务也一样：

$ kubectl logs solar-demo-5845984b94-xp82l api
npm info it worked if it ends with ok
npm info using npm@5.6.0
npm info using node@v9.11.2
npm info lifecycle nf-images-test@1.0.0~prestart-api: nf-images-test@1.0.0
npm info lifecycle nf-images-test@1.0.0~start-api: nf-images-test@1.0.0

> nf-images-test@1.0.0 start-api /opt/app-root/src
> node api.js

{"level":30,"time":1530271244205,"msg":"Server listening at http://0.0.0.0:3000","pid":21,"hostname":"solar-demo-5845984b94-xp82l","v":1}
server listening on 3000

我收到 503 请求，而图像从来没有收到任何请求，就好像 Ingress "thought" 每个 Pod 都宕机了之类的。我可以检查什么？

$ curl -v http://shmukler.example.com/solar
*   Trying 192.168.99.101...
* Connected to shmukler.example.com (192.168.99.101) port 80 (#0)
> GET /solar HTTP/1.1
> Host: shmukler.example.com
> User-Agent: curl/7.43.0
> Accept: */*
> 
< HTTP/1.1 503 Service Temporarily Unavailable
< Server: nginx/1.13.7
< Date: Sun, 01 Jul 2018 13:49:38 GMT
< Content-Type: text/html
< Content-Length: 213
< Connection: keep-alive
< 
<html>
<head><title>503 Service Temporarily Unavailable</title></head>
<body bgcolor="white">
<center><h1>503 Service Temporarily Unavailable</h1></center>
<hr><center>nginx/1.13.7</center>
</body>
</html>
* Connection #0 to host shmukler.example.com left intact

请指教

Answer 1

注释中缺少配置：

nginx.org/server-snippet: "proxy_ssl_verify off;"

K8s Ingress 服务返回 503，Pod 日志中没有任何内容

K8s Ingress service returning 503, nothing in Pod logs

nginx

kubernetes

minikube

kubernetes-ingress