通过在Service的Yaml文件中配置注解Annotation，您可以对天翼云负载均衡、监听转发等进行配置，本文介绍LoadBalancer类型Service支持配置的Annotation。

注解说明

健康检查字段数据结构说明

使用已有负载均衡

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"  #负载均衡ELB实例的ID
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

创建私网负载均衡

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-spec: "elb.s2.small"  #新建负载均衡规格为标准型Ⅰ
    service.beta.kubernetes.io/ctyun-loadbalancer-address-type: "intranet"  #新建负载均衡为私网类型
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

新建公网负载均衡

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-spec: "elb.s2.small"  #新建负载均衡规格为标准型Ⅰ
    service.beta.kubernetes.io/ctyun-loadbalancer-address-type: "internet"  #新建负载均衡为公网类型
    service.beta.kubernetes.io/ctyun-loadbalancer-charge-type: "bandwidth"  #公网计费按带宽计费
    service.beta.kubernetes.io/ctyun-loadbalancer-bandwidth: "5"  #公网带宽大小为5Mbps
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

配置监听HTTP协议

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "lb-***"
    service.beta.kubernetes.io/ctyun-loadbalancer-protocol-port: "http:80"  #监听HTTP的80端口
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

配置监听HTTPS协议

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-protocol-port: "https:443"  #监听HTTPS的443端口
    service.beta.kubernetes.io/ctyun-loadbalancer-ssl-cert: "${YOUR_CERT_ID}"  #SSL证书ID
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 443
      targetPort: 80
  type: LoadBalancer

配置附加X-Forwarded-For请求头

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-xforwardedfor: "true"
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

配置全局健康检查

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-flag: "on"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-option: '{
      "protocol":"TCP",
      "interval":"5",
      "timeout":"10",
      "maxRetry":"3"
    }'
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
    - protocol: TCP
      port: 90
      targetPort: 90
  type: LoadBalancer

配置部分端口健康检查

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-flag: "on"
    service.beta.kubernetes.io/ctyun-loadbalancer-health-check-options: '[
      {
        "servicePort":"TCP:90",  #指定监听协议为TCP、服务端口为90的端口配置
        "protocol":"TCP",        #指定健康检查协议为TCP
        "interval":"5",
        "timeout":"10",
        "maxRetry":"3"
      },
      {
        "servicePort":"TCP:80",  #指定监听协议为TCP、服务端口为80的端口配置
        "protocol":"HTTP",       #指定健康检查协议为HTTP
        "interval":"5",
        "timeout":"10",
        "maxRetry":"3",
        "path":"/healthz",
        "expectedCodes":"http_2xx"
      },
    ]'
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
    - protocol: TCP
      port: 90
      targetPort: 90
  type: LoadBalancer

配置访问控制黑/白名单

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-acl-flag: "white"         #白名单控制
    service.beta.kubernetes.io/ctyun-loadbalancer-acl-status: "on"          #开启访问控制
    service.beta.kubernetes.io/ctyun-loadbalancer-acl-id: "${YOUR_ACL_ID}"  #ELB的访问策略组ID
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer

为TCP监听配置Proxy Protocol协议

kind: Service
apiVersion: v1
metadata:
  name: nginx
  annotations:
    service.beta.kubernetes.io/ctyun-loadbalancer-id: "${YOUR_LOADBALANCER_ID}"
    service.beta.kubernetes.io/ctyun-loadbalancer-proxy-protocol-flag: "on"
spec:
  selector:
    app: nginx
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  type: LoadBalancer