模块允许给与特定的mapping 或者整体添加特定的行为,方便进行系统的控制。
当前的module 定义主要是系统级别的当前系统主要的配置
---apiVersion: ambassador/v0kind: Modulename: ambassadorconfig: # If present, service_port will be the port Ambassador listens # on for microservice access. If not present, Ambassador will # use 443 if TLS is configured, 80 otherwise. # service_port: 80 # diag_port is the port where Ambassador will listen for requests # to the diagnostic service. # diag_port: 8877 # admin_port is the port where Ambassador's Envoy will listen for # low-level admin requests. You should almost never need to change # this. # admin_port: 8001 # liveness probe defaults on, but you can disable it. # liveness_probe: # enabled: false # readiness probe defaults on, but you can disable it. # readiness_probe: # enabled: false # use_proxy_protocol controls whether Envoy will honor the PROXY # protocol on incoming requests. # use_proxy_proto: false # use_remote_address controls whether Envoy will trust the remote # address of incoming connections or rely exclusively on the # X-Forwarded_For header. # # The current default is not to include any use_remote_address setting, # but THAT IS LIKELY TO CHANGE SOON. # use_remote_address: false
几个配置的说明
- use_remote_address
用户请求的原地址的处理,当前为false,具体的可以参考envoy 的配置文档
- use_proxy_proto
proxy 协议的说明
- Probes
探针配置支持liveness readiness 支持进行修改,可以支持prefix rewite service 和mapping 使用类似
- tls 模块 参考配置
---apiVersion: ambassador/v0kind: Modulename: tlsconfig: server: enabled: True redirect_cleartext_from: 80