IP地址配置HTTPS 内网IP配置HTTPS保姆教程
本文介绍了在Nginx中配置HTTPS的完整流程:1)使用OpenSSL生成自签名证书和私钥;2)解密私钥以避免重启时输入密码;3)配置Nginx支持HTTPS,包括指定证书路径、设置安全协议和加密套件等。适用于开发、测试和内网环境,但需注意自签名证书会触发浏览器警告,生产环境建议使用CA签发的正式证书。通过简单的命令和配置即可实现基本的HTTPS加密保护。


spring-boot-maven-plugin小贴士:建议使用 Spring Boot 3.x 及以上版本,确保原生镜像支持与安全性。
编写 Dockerfile(放在项目根目录)
FROM eclipse-temurin:17-jdk-jammy
VOLUME /tmp
COPY target/*.jar app.jar
ENTRYPOINT ["java","-jar","/app.jar"]
构建镜像
mvn clean package -DskipTests
docker build -t your-registry/springboot-k8s-demo:1.0.0 .
docker push your-registry/springboot-k8s-demo:1.0.0
示意图:
Deployment
apiVersion: apps/v1
kind: Deployment
metadata:
name: springboot-demo
spec:
replicas: 3
selector:
matchLabels:
app: springboot
template:
metadata:
labels:
app: springboot
spec:
containers:
- name: springboot
image: your-registry/springboot-k8s-demo:1.0.0
ports:
- containerPort: 8080
readinessProbe:
httpGet:
path: /actuator/health
port: 8080
initialDelaySeconds: 10
periodSeconds: 5
Service
apiVersion: v1
kind: Service
metadata:
name: springboot-demo-svc
spec:
type: LoadBalancer
selector:
app: springboot
ports:
- port: 80
targetPort: 8080
kubectl apply -f deployment.yaml
kubectl apply -f service.yaml
验证:
kubectl get pods
kubectl get svc
示意图:
滚动更新:在 Deployment.spec.strategy 中配置
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 1
maxUnavailable: 1
回滚:
kubectl rollout undo deployment/springboot-demo
# 示例:Prometheus 服务发现 Annotation
metadata:
annotations:
prometheus.io/scrape: "true"
prometheus.io/port: "8080"
示意图:







