fix1.sh
2.29 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
#!/bin/bash
echo "=== 修复前端 Pod 的 nginx 配置 ==="
echo "1. 检查前端 Pod 使用的 nginx 配置:"
kubectl exec -it $(kubectl get pods -n ecommerce -l app=frontend -o name | head -1) -n ecommerce -- cat /etc/nginx/nginx.conf
echo ""
echo "2. 检查前端 Pod 使用的 ConfigMap:"
kubectl get deployment frontend -n ecommerce -o yaml | grep -A 10 -B 10 "configMap\|volumeMounts"
echo ""
echo "3. 更新前端 ConfigMap 修复 nginx 配置:"
cat << 'EOF' | kubectl apply -f -
apiVersion: v1
kind: ConfigMap
metadata:
  name: frontend-nginx-config
  namespace: ecommerce
  labels:
    app: frontend
data:
  nginx.conf: |
    events {
        worker_connections 1024;
    }
    http {
        include /etc/nginx/mime.types;
        default_type application/octet-stream;
        
        upstream api_gateway {
            # 指向外部 API Gateway
            server api.awsmpc.asia:443;
        }
        
        server {
            listen 80;
            server_name localhost;
            
            # 健康检查
            location /health {
                access_log off;
                add_header Content-Type text/plain;
                return 200 "healthy\n";
            }
            
            # API 代理 - 指向外部 API Gateway
            location /api/ {
                proxy_pass https://api_gateway/;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection 'upgrade';
                proxy_set_header Host api.awsmpc.asia;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_cache_bypass $http_upgrade;
                
                # SSL 设置
                proxy_ssl_server_name on;
                proxy_ssl_verify off;
                
                # 超时设置
                proxy_connect_timeout 30s;
                proxy_send_timeout 30s;
                proxy_read_timeout 30s;
            }
            
            # 静态文件服务
            location / {
                root /usr/share/nginx/html;
                index index.html;
                try_files $uri $uri/ /index.html;
            }
        }
    }
EOF