meso5533

@meso5533 通过 service_name:grpc_port 的话可以正常通信，但是通过 pod_ip:grpc_port 不行

apiVersion: v1
kind: Service
metadata:
name: test-k8s-server-grpc
namespace: test-k8s
spec:
ports:
- name: grpc
port: 16071
protocol: TCP
targetPort: 16071
selector:
app: test-k8s-server

---

apiVersion: v1
kind: Service
metadata:
name: test-k8s-server-debug
namespace: test-k8s
annotations:
prometheus.io/scrape: 'true'
prometheus.io/port: '15225'
spec:
ports:
- name: debug
port: 15225
protocol: TCP
targetPort: 15225
selector:
app: test-k8s-server

---

apiVersion: apps/v1
kind: Deployment
metadata:
name: test-k8s-server
namespace: test-k8s
spec:
replicas: 1
selector:
matchLabels:
app: test-k8s-server
template:
metadata:
name: test-k8s-server
labels:
app: test-k8s-server
spec:
containers:
- name: test-k8s-server
image: xxxxxx:latest
command:
- /root/test_k8s
- server
- --log-level
- debug
ports:
- name: grpc
containerPort: 16071
- name: debug
containerPort: 15225
imagePullSecrets:
- name: regcred

grpc 的 port 无法正常通信，debug( http 协议)的 port 可以

@newskillsget 是的

@GopherDaily pod 和 svc 是相同的 port
istioctl proxy-config -n test-k8s listeners test-k8s-server-9cbcf8b9b-4s2q5 --port 16071
ADDRESS PORT MATCH DESTINATION
0.0.0.0 16071 Trans: raw_buffer; App: http/1.1,h2c Route: 16071
0.0.0.0 16071 ALL PassthroughCluster

abs((sum by (name) (irate(node_cpu{mode!~"idle"}[5m])) * 100) - on (name) (sum by (name) (irate(node_cpu{mode!~"idle"}[5m] offset 5m))) * 100) > 5

不确定对不对，总之要用到 offset

成功关掉了，谢谢两位

查了一下，需要在 robots.txt 里声明信任其他域名 sitemap