Kubernetes Docker for Nginx和php-fpm连接错误

Question

我使用Kubernetes部署了一个docker。在正在运行的AWS K8"podd"上，我突然开始出现以下错误:

connect() failed (111: Connection refused) while connecting to upstream, client: X.0.XX.XX, server: _, request: "GET /api/endpoint& HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "domain.com"

这似乎与php-fpm的nginx配置有关，而不是Dockerfile或部署。立即修复此错误的方法是重新启动Kubernetes pod(无论哪个pod碰巧给出此错误)。

我怀疑，如果php-fpm恰好在给定的pod内失败，那是当它停止侦听端口9000?我ssh进入pod并执行netstat来验证这一点，它显示9000是活的。

参考Dockerfile:

FROM trafex/alpine-nginx-php7:1.9.0
USER root
RUN apk add --no-cache file
RUN apk --update add imagemagick
RUN apk --no-cache add php7-redis php7-simplexml php7-iconv php7-imagick
RUN curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer
ARG gh_token
ADD nginx-host.conf /etc/nginx/nginx.conf
RUN rm -Rf /var/www/html/
COPY . /var/www/html/
RUN composer config --global github-oauth.github.com ${gh_token}
RUN cd /var/www/html/ 
&& composer update

RUN composer config --global github-oauth.github.com "none"
USER nobody

nginx.conf:

worker_processes auto;
error_log stderr warn;
pid /run/nginx.pid;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
# Define custom log format to include reponse times
log_format main_timed '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for" '
'$request_time $upstream_response_time $pipe $upstream_cache_status';
access_log /dev/stdout main_timed;
error_log /dev/stderr notice;
keepalive_timeout 65;
# Write temporary files to /tmp so they can be created as a non-privileged user
client_body_temp_path /tmp/client_temp;
proxy_temp_path /tmp/proxy_temp_path;
fastcgi_temp_path /tmp/fastcgi_temp;
uwsgi_temp_path /tmp/uwsgi_temp;
scgi_temp_path /tmp/scgi_temp;

underscores_in_headers on;
map $request_uri $version {
~(?<captured_topdir>^/[a-zA-Z0-9]+[/]) $captured_topdir;
}
# Default server definition
server {
listen [::]:8080 default_server;
listen 8080 default_server;
server_name _;
sendfile off;

client_max_body_size 6M;

root /var/www/html;
index index.php index.html;
# Redirect server error pages to the static page /50x.html
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /var/lib/nginx/html;
}
location / {
rewrite ^/(v[0-9]+|stage|partner)?/(.*)$ /$2 last;
set $new_uri $uri;
try_files $uri $uri/ /index.php?$query_string;
}
# Pass the PHP scripts to PHP-FPM listening on 127.0.0.1:9000
location ~ .php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+.php)(/.+)$;
fastcgi_pass 127.0.0.1:9000;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
fastcgi_param API_VERSION $version;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param REQUEST_URI $new_uri;
}
location ~* .(jpg|jpeg|gif|png|css|js|ico|xml)$ {
expires 5d;
}
# Deny access to . files, for security
location ~ /. {
log_not_found off;
deny all;
}
# Allow fpm ping and status from localhost
location ~ ^/(fpm-status|fpm-ping)$ {
access_log off;
allow 127.0.0.1;
deny all;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
include fastcgi_params;
fastcgi_pass 127.0.0.1:9000;
}
}

gzip on;
gzip_proxied any;
gzip_types text/plain application/xml text/css text/js text/xml application/x-javascript text/javascript application/json application/xml+rss;
gzip_vary on;
gzip_disable "msie6";

# Include other server configs
include /etc/nginx/conf.d/*.conf;
}

关于nginx配置的任何想法，这个错误可能会浮出水面?

Answer 1

看起来Nginx正在从流中获取连接拒绝

我建议尝试使用简单的Nginx配置，将其存储在Kubernetesconfigmap

apiVersion: v1
kind: ConfigMap
metadata:
name: nginxthroughpass
namespace: development
data:
default.conf: |-
server {
listen 80 default_server;
root /var/www/html;
server_name  _;
index index.php;
location / {
try_files $uri $uri/ /index.php?$args;
}
location ~ .php$ {
fastcgi_split_path_info ^(.+.php)(/.+)$;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param   PATH_INFO       $fastcgi_path_info;
fastcgi_param   SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
}

在PHP fpm部署时注入Nginx configmap

apiVersion: extensions/v1
kind: Deployment
metadata:
labels:
app: wordpress-site
name: wordpress-site
namespace: development
spec:
progressDeadlineSeconds: 600
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
app: wordpress-site
tier: frontend
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
creationTimestamp: null
labels:
app: wordpress-site
tier: frontend
spec:
volumes:
- configMap:
defaultMode: 256
name: nginxthroughpass
optional: false
name: nginxconf
- name: shared-files
emptyDir: {}
containers:
- name: app
image: <REPLACE WITH DOCKER PHP-FPM IMAGE URL>
imagePullPolicy : IfNotPresent
volumeMounts:
- name: shared-files
mountPath: /var/www/html
envFrom:
- configMapRef:
name: wordpress-configmap
- name: nginx
image: nginx
imagePullPolicy : IfNotPresent
volumeMounts:
- name: shared-files
mountPath: /var/www/html
- mountPath: /etc/nginx/conf.d
name: nginxconf
readOnly: true

代替WordPress图像，替换php-fpm图像并测试。

使用Php-fpm WordPress检查NginxPod并将配置存储到配置映射中。

https://github.com/harsh4870/Kubernetes-wordpress-php-fpm-nginx