Kubernetes GKE入口：502服务器错误

Question

我目前正在使用google云平台设置一个web应用程序，但在使用GKE ingress controller部署时遇到了一个问题。

我无法使用我的子域名访问应用程序。页面显示以下消息：

502 Server Error
Error: Server Error

The server encountered a temporary error and could not complete your request.

Please try again in 30 seconds.

尽管配置了健康检查，但入口似乎仍然没有正确响应。同时，我的SSL证书对于我的子域名工作正常。

这是我的入口配置：

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: frontend-ingress
  annotations:
    kubernetes.io/ingress.global-static-ip-name: "myapp-static-addr"
    networking.gke.io/v1beta1.FrontendConfig: "frontend-ingress-config"
spec:
  rules:
  - host: test.myapp.com
    http:
      paths:
      - path: /
        backend:
          serviceName: frontend-service
          servicePort: 3333
  tls:
  - secretName: stage-ssl"

这就是我的服务：

apiVersion: v1
kind: Service
metadata:
  name: frontend-service
  namespace: default
  annotations:
    cloud.google.com/backend-config: '{"default": "frontend-config"}'
spec:
  type: NodePort
  selector:
    app: frontend-server
  ports:
    - port: 3333
      protocol: TCP
      targetPort: 3000

最后是我的部署：

apiVersion: apps/v1
kind: Deployment
metadata:
  name: frontend-deployment
  labels:
    app: frontend-server
spec:
  replicas: 1
  selector:
    matchLabels:
      app: frontend-server
  template:
    metadata:
      labels:
        app: frontend-server
    spec:
      containers:
      - name: client-ssr
        image: eu.gcr.io/myapp-test/client-ssr
        ports:
        - name: client-port
          containerPort: 3000
        resources:
          requests:
            cpu: "0.35"
          limits:
            cpu: "0.55"
        env:
          - name: CONFIG_ENV
            value: "STAGE"
        imagePullPolicy: Always
        volumeMounts:
        - name: certificate
          mountPath: "/etc/certificate"
          readOnly: true
      volumes:
        - name: certificate
          secret:
            secretName: stage-ssl

入口描述如下：

Name:             frontend-ingress
Namespace:        default
Address:          34.106.6.15
Default backend:  default-http-backend:80 (10.26.31.88:8080)
TLS:
  stage-ssl terminates 
Rules:
  Host                  Path  Backends
  ----                  ----  --------
  test.myapp.com  
                        /   frontend-service:3333 (10.22.46.111:3000)
Annotations:
  kubernetes.io/ingress.global-static-ip-name:       myapp-static-addr
  ingress.kubernetes.io/backends:                    {"k8s-be-32171--41df3ab30d90ff92":"HEALTHY","k8s1-41df3ab3-default-frontend-service-3333-5186e808":"HEALTHY"}
  ingress.kubernetes.io/forwarding-rule:             k8s2-fr-opm63ww1-default-frontend-ingress-8gn6ll7p
  ingress.kubernetes.io/https-forwarding-rule:       k8s2-fs-opm63ww1-default-frontend-ingress-8gn6ll7p
  ingress.kubernetes.io/redirect-url-map:            k8s2-rm-opm63ww1-default-frontend-ingress-8gn6ll7p
  ingress.kubernetes.io/ssl-cert:                    k8s2-cr-opm63ww1-f42czv69pq6f2emd-5bd4c7395be5bd4e
  ingress.kubernetes.io/https-target-proxy:          k8s2-ts-opm63ww1-default-frontend-ingress-8gn6ll7p
  ingress.kubernetes.io/target-proxy:                k8s2-tp-opm63ww1-default-frontend-ingress-8gn6ll7p
  ingress.kubernetes.io/url-map:                     k8s2-um-opm63ww1-default-frontend-ingress-8gn6ll7p
  kubectl.kubernetes.io/last-applied-configuration:  {"apiVersion":"networking.k8s.io/v1beta1","kind":"Ingress","metadata":{"annotations":{"kubernetes.io/ingress.global-static-ip-name":"myapp-static-addr","networking.gke.io/v1beta1.FrontendConfig":"frontend-ingress-config"},"name":"frontend-ingress","namespace":"default"},"spec":{"rules":[{"host":"test.myapp.com","http":{"paths":[{"backend":{"serviceName":"frontend-service","servicePort":3333},"path":"/"}]}}],"tls":[{"secretName":"stage-ssl"}]}}

  networking.gke.io/v1beta1.FrontendConfig:  frontend-ingress-config
Events:
  Type    Reason     Age                  From                     Message
  ----    ------     ----                 ----                     -------
  Normal  Sync       18m                  loadbalancer-controller  UrlMap "k8s2-um-opm63ww1-default-frontend-ingress-8gn6ll7p" created
  Normal  Sync       18m                  loadbalancer-controller  TargetProxy "k8s2-tp-opm63ww1-default-frontend-ingress-8gn6ll7p" created
  Normal  Sync       18m                  loadbalancer-controller  ForwardingRule "k8s2-fr-opm63ww1-default-frontend-ingress-8gn6ll7p" created
  Normal  Sync       18m                  loadbalancer-controller  TargetProxy "k8s2-ts-opm63ww1-default-frontend-ingress-8gn6ll7p" created
  Normal  IPChanged  18m                  loadbalancer-controller  IP is now 34.106.6.15
  Normal  Sync       18m                  loadbalancer-controller  ForwardingRule "k8s2-fs-opm63ww1-default-frontend-ingress-8gn6ll7p" created
  Normal  Sync       16m                  loadbalancer-controller  UrlMap "k8s2-um-opm63ww1-default-frontend-ingress-8gn6ll7p" updated
  Normal  Sync       16m                  loadbalancer-controller  TargetProxy "k8s2-tp-opm63ww1-default-frontend-ingress-8gn6ll7p" updated
  Normal  Sync       2m18s (x8 over 19m)  loadbalancer-controller  Scheduled for sync

如何使我的web应用正常工作？

提前谢谢你。

Answer 1

显然，我相信GCE入口必须有defaultBackend，请参阅我的问题DefaultBackend是否是入口（gce）的强制要求？