docker - 努力让 traefik 与堆栈中的服务一起工作

Question

我真的很难让 traefik 在集群模式下工作。我创建了 traefik 服务并按照你们在文档中的说明对其进行了标记。然后我向 docker-compose 添加了一项服务，并将其标记为如下所示。

我在那之后我做docker stack deploy -c traefik.yml traefik-demo。当检查服务时，我可以看到标签，我可以进入仪表板，但我看不到 gateway.localhost :frowning: 这与网关服务有关。

我遵循了这些文档： https://dockerswarm.rocks/traefik/#getting-the-client-ip https://doc.traefik.io/traefik/routing/providers/docker/#services

这是我的码头工人撰写：

services:

  traefik:
    image: traefik:latest
    ports:
      # Listen on port 80, default for HTTP, necessary to redirect to HTTPS
      - 80:80
      # Listen on port 443, default for HTTPS
      - 443:443
    deploy:
      placement:
        constraints:
          - node.role == manager
          - node.labels.traefik-public.traefik-public-certificates == true
      labels:
        # Enable Traefik for this service, to make it available in the public network
        - traefik.enable=true
        # Use the traefik-public network (declared below)
        - traefik.docker.network=traefik-public
        # Use the custom label "traefik.constraint-label=traefik-public"
        # This public Traefik will only use services with this label
        # That way you can add other internal Traefik instances per stack if needed
        - traefik.constraint-label=traefik-public
        # admin-auth middleware with HTTP Basic auth
        # Using the environment variables USERNAME and HASHED_PASSWORD
        - traefik.http.middlewares.admin-auth.basicauth.users=${USERNAME?Variable not set}:${HASHED_PASSWORD?Variable not set}
        # https-redirect middleware to redirect HTTP to HTTPS
        # It can be re-used by other stacks in other Docker Compose files
        - traefik.http.middlewares.traefik-demo-https-redirect.redirectscheme.scheme=https
        - traefik.http.middlewares.traefik-demo-https-redirect.redirectscheme.permanent=true
        # traefik-http set up only to use the middleware to redirect to https
        # Uses the environment variable DOMAIN
        - traefik.http.routers.traefik-demo-traefik-public-http.rule=Host(`traefik.${DOMAIN?Variable not set}`)
        - traefik.http.routers.traefik-demo-traefik-public-http.entrypoints=http
        - traefik.http.routers.traefik-demo-traefik-public-http.middlewares=https-redirect
        # traefik-https the actual router using HTTPS
        # Uses the environment variable DOMAIN
        - traefik.http.routers.traefik-demo-traefik-public-https.rule=Host(`traefik.${DOMAIN?Variable not set}`)
        - traefik.http.routers.traefik-demo-traefik-public-https.entrypoints=https
        - traefik.http.routers.traefik-demo-traefik-public-https.tls=true
        # Use the special Traefik service api@internal with the web UI/Dashboard
        - traefik.http.routers.traefik-demo-traefik-public-https.service=api@internal
        # Use the "le" (Let's Encrypt) resolver created below
        - traefik.http.routers.traefik-demo-traefik-public-https.tls.certresolver=le
        # Enable HTTP Basic auth, using the middleware created above
        - traefik.http.routers.traefik-demo-traefik-public-https.middlewares=admin-auth
        
        # Define the port inside of the Docker service to use
        - traefik.http.services.traefik-demo.loadbalancer.server.port=80

    volumes:
      # Add Docker as a mounted volume, so that Traefik can read the labels of other services
      - /var/run/docker.sock:/var/run/docker.sock:ro
      # Mount the volume to store the certificates
      - traefik-public-certificates:/certificates
    command:
      # Enable Docker in Traefik, so that it reads labels from Docker services
      - --providers.docker
      # Add a constraint to only use services with the label "traefik.constraint-label=traefik-public"
      - --providers.docker.constraints=Label(`traefik.constraint-label`, `traefik-public`)
      # Do not expose all Docker services, only the ones explicitly exposed
      - --providers.docker.exposedbydefault=false
      # Enable Docker Swarm mode
      - --providers.docker.swarmmode
      # Create an entrypoint "http" listening on port 80
      - --entrypoints.http.address=:80
      # Create an entrypoint "https" listening on port 443
      - --entrypoints.https.address=:443
      # Create the certificate resolver "le" for Let's Encrypt, uses the environment variable EMAIL
      - --certificatesresolvers.le.acme.email=${EMAIL?Variable not set}
      # Store the Let's Encrypt certificates in the mounted volume
      - --certificatesresolvers.le.acme.storage=/certificates/acme.json
      # Use the TLS Challenge for Let's Encrypt
      - --certificatesresolvers.le.acme.tlschallenge=true
      # Enable the access log, with HTTP requests
      - --accesslog
      # Enable the Traefik log, for configurations and errors
      - --log
      # Enable the Dashboard and API
      - --api
    networks:
      # Use the public network created to be shared between Traefik and
      # any other service that needs to be publicly available with HTTPS
      - traefik-public

  khotabaa-gateway:
    image: khotabaa-gateway-service
    deploy:
      # placement:
      #   constraints:
      #     - node.labels.traefik-public.traefik-public-certificates == true
      labels:
        - traefik.enable=true
        - traefik.docker.lbswarm=true
        - traefik.docker.network=traefik-public
        - traefik.constraint-label-stack=traefik-public
        - traefik.http.routers.khotabaa-gateway.rule=Host(`gateway.${DOMAIN?Variable not set}`)
        - traefik.http.routers.khotabaa-gateway.entrypoints=web
        # - traefik.http.routers.gateway-https.rule=Host(`gateway.${DOMAIN?Variable not set}`)
        - traefik.http.routers.khotabaa-gateway-http.entrypoints=http
        - traefik.http.routers.khotabaa-gateway.middlewares=traefik-demo-https-redirect
        - traefik.http.routers.khotabaa-gateway-https.entrypoints=https
        - traefik.http.routers.khotabaa-gateway-https.tls=true
        - traefik.http.routers.khotabaa-gateway-https.tls.certresolver=le
        - traefik.http.services.khotabaa-gateway.loadbalancer.server.port=9002
    environment:
      IDENTITY_AUTHORITY_URI: 'http://172.16.8.3:5001'
      USER_API_URI: 'http://khotabaa-user-service:5006'
      POEM_API_URI: 'http://khotabaa-poem-service:5007'
      MAJLES_API_URI: 'http://khotabaa-majles-service:5008'
      NOTIFICATION_API_URI: 'http://khotabaa-notification-service:5009'
    ports:
      - 9002:9002
    networks:
      - traefik-public

volumes:
  # Create a volume to store the certificates, there is a constraint to make sure
  # Traefik is always deployed to the same Docker node with the same volume containing
  # the HTTPS certificates
  traefik-public-certificates:

networks:
  # Use the previously created public network "traefik-public", shared with other
  # services that need to be publicly available via this Traefik
  traefik-public:
    external: true

标签： dockerstackdocker-swarmtraefik