dyrnq/apisix Docker 镜像 - 轩辕镜像 | Docker 镜像高效稳定拉取服务

Build APISIX-Openresty for mTls etcd ref

vi ~/apisix_conf/config.yaml

yaml
apisix:
  node_listen: 9080
  enable_ipv6: false
  ssl:
    ssl_trusted_certificate: /etc/kubernetes/pki/etcd/etcd-ca.crt
etcd:
  host:
    - "[***]"
    - "[***]"
    - "[***]"
  prefix: "/apisix"
  timeout: 30
  tls:
    cert: /etc/kubernetes/pki/etcd/apiserver-etcd-client.crt
    key: /etc/kubernetes/pki/etcd/apiserver-etcd-client.key
    verify: false

plugin_attr:
  prometheus:
    export_addr:
      ip: "0.0.0.0"
      port: 9091

bash
mkdir -p /opt/apisix/etcd

cp /etc/kubernetes/pki/etcd/etcd-ca.crt /opt/apisix/etcd/etcd-ca.crt
cp /etc/kubernetes/pki/etcd/apiserver-etcd-client.crt /opt/apisix/etcd/
cp /etc/kubernetes/pki/etcd/apiserver-etcd-client.key /opt/apisix/etcd/

ls -l /opt/apisix/etcd

chown -R 1001:1001 /opt/apisix/etcd

docker run -d \
--name apisix \
--restart always \
-v ~/apisix_conf/config.yaml:/usr/local/apisix/conf/config.yaml  \
-v /opt/apisix/etcd:/etc/kubernetes/pki/etcd \
dyrnq/apisix:2.9

if apisix version >= 2.11.0 set verify: true AND sni

yaml
etcd:
  host:
    - "[***]"
    - "[***]"
    - "[***]"
  prefix: "/apisix"
  timeout: 30
  tls:
    cert: /etc/kubernetes/pki/etcd/self-signed-apisix-etcd-client.crt
    key: /etc/kubernetes/pki/etcd/self-signed-apisix-etcd-client.key
    sni: "admin.apisix.dev"
    verify: true

if your etcd server side has no sni , set verify: false

Dockerfile