document nginx proxy

pull/345/head
Kelsey Hightower 2018-05-13 19:19:48 +00:00
parent d970a79440
commit ef64d9a075
1 changed files with 4 additions and 0 deletions

View File

@ -291,6 +291,10 @@ In this section you will provision an external load balancer to front the Kubern
### Enable HTTP Health Checks ### Enable HTTP Health Checks
A [Google Network Load Balancer](https://cloud.google.com/compute/docs/load-balancing/network) will be used to distribute traffic across the three API servers and allow each API server to terminate TLS connections and validate client certificates. The network load balancer only supports HTTP health checks which means the HTTPS endpoint exposed by the API server cannot be used. As a workaround the nginx webserver can be used to proxy HTTP health checks. In this section nginx will be installed and configured to accept HTTP health checks on port `80` and proxy the connections to the API server on `https://127.0.0.1:6443/healthz`.
> The `/healthz` API server endpoint does not require authentication by default.
The following commands must be run on each controller instance. Example: The following commands must be run on each controller instance. Example:
``` ```