Kubernetes cluster load balance handling method and apparatus, and storage medium

1. A method comprising:

acquiring traffic configuration rules for controllers in a cluster by a central control component of the cluster, the cluster being a Kubernetes cluster;

sending the traffic configuration rules to a proxy container corresponding to each of the controllers; and

controlling a data interaction between an API server and the controllers through the proxy container based on the traffic configuration rules, the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules comprising:

sending data received by the proxy container to a controller corresponding to the proxy container;

in response to determining that the controller corresponding to the proxy container triggers data processing, calling an interface of the proxy container to determine that the data conforms to the traffic configuration rules; and

in response to determining that the data conforms to the traffic configuration rules, allowing the controller corresponding to the proxy container to perform a data processing.

2. The method according to claim 1 , wherein before the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules, the method further comprises:

receiving a data request instruction sent by at least one of the controllers through the proxy container;

sending the data request instruction to the API server through the proxy container; and

receiving data sent by the API server.

3. The method according to claim 1 , wherein before the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules, the method further comprises:

receiving a data request instruction triggered by the API server through the proxy container; and

in response to the data request instruction, receiving data sent by the API server through the proxy container.

4. The method according to claim 3 , wherein the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules comprises:

filtering the received data based on the traffic configuration rules in the proxy container to acquire the filtered data; and

sending the filtered data to a controller corresponding to the proxy container.

5. The method according to claim 1 , wherein the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules further comprises:

in response to determining that the data does not conform to the traffic configuration rules, disallowing the controller corresponding to the proxy container to perform the data processing.

6. The method according to claim 1 , wherein:

the traffic configuration rules comprise a global limit rule; and

after the sending the traffic configuration rules to the proxy container corresponding to each of the controllers, the method further comprises:

intercepting a request that does not conform to the global limit rule by the proxy container; or

sending a request that conforms to the global limit rule to the API server.

7. The method according to claim 1 , wherein:

the traffic configuration rules comprise a sharding routing rule; and

after sending the traffic configuration rules to a proxy container corresponding to each of the controllers, the method further comprises:

intercepting a webhook request from the API server by the proxy container;

determining that the webhook request conforms to the sharding routing rule of a current instance; and

forwarding the webhook request to a local webhook of the proxy container for processing.

8. The method according to claim 1 , wherein:

the traffic configuration rules comprise a sharding routing rule; and

after sending the traffic configuration rules to a proxy container corresponding to each of the controllers, the method further comprises:

intercepting a webhook request from the API server by the proxy container;

determining that the webhook request does not conform to the sharding routing rule of a current instance; and

forwarding the webhook request to an instance for which the webhook request conforms to the sharding routing rule of the instance for processing.

9. The method according to claim 1 , wherein the method further comprises:

setting a security protection strategy in the proxy container, wherein the security protection strategy comprises at least one of following: traffic limiting, fusing off, and one-click suspension.

10. The method according to claim 1 , wherein the method further comprises:

monitoring interaction information between the controller and the API server through the proxy container; and

displaying the monitored interaction information on a display interface.

11. An apparatus comprising:

one or more processors; and

one or more memories storing thereon computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to perform acts comprising:

acquiring traffic configuration rules for controllers in a cluster by a central control component of the cluster, the cluster being a Kubernetes cluster;

sending the traffic configuration rules to a proxy container corresponding to each of the controllers; and

controlling a data interaction between an API server and the controllers through the proxy container based on the traffic configuration rules, the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules comprising:

sending data received by the proxy container to a controller corresponding to the proxy container;

in response to determining that the controller corresponding to the proxy container triggers data processing, calling an interface of the proxy container to determine that the data conforms to the traffic configuration rules; and

in response to determining that the data conforms to the traffic configuration rules, allowing the controller corresponding to the proxy container to perform a data processing.

12. The apparatus of claim 11 , wherein before the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules, the acts further comprise:

receiving a data request instruction sent by at least one of the controllers through the proxy container;

sending the data request instruction to the API server through the proxy container; and

receiving data sent by the API server.

13. The apparatus according to claim 11 , wherein before the controlling data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules, the acts further comprise:

receiving a data request instruction triggered by the API server through the proxy container; and

in response to the data request instruction, receiving data sent by the API server through the proxy container.

14. The apparatus according to claim 13 , wherein the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules further comprises:

filtering the received data based on the traffic configuration rules in the proxy container to acquire filtered data; and

sending the filtered data to a controller corresponding to the proxy container.

15. The apparatus according to claim 11 , wherein the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules further comprises:

in response to determining that the data does not conform to the traffic configuration rules, disallowing the controller corresponding to the proxy container to perform the data processing.

16. One or more memories storing thereon computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising:

acquiring traffic configuration rules for controllers in a cluster by a central control component of the cluster, the cluster being a Kubernetes cluster;

sending the traffic configuration rules to a proxy container corresponding to each of the controllers; and

controlling a data interaction between an API server and the controllers through the proxy container based on the traffic configuration rules, the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules comprising:

sending data received by the proxy container to a controller corresponding to the proxy container;

in response to determining that the controller corresponding to the proxy container triggers data processing, calling an interface of the proxy container to determine that the data conforms to the traffic configuration rules; and

in response to determining that the data conforms to the traffic configuration rules, allowing the controller corresponding to the proxy container to perform a data processing.

17. The one or more memories of claim 16 , wherein before the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules, the acts further comprise:

receiving a data request instruction sent by at least one of the controllers through the proxy container;

sending the data request instruction to the API server through the proxy container; and

receiving data sent by the API server.

18. The one or more memories according to claim 16 , wherein the controlling the data interaction between the API server and the controllers through the proxy container based on the traffic configuration rules further comprises:

in response to determining that the data does not conform to the traffic configuration rules, disallowing the controller corresponding to the proxy container to perform the data processing.

19. The one or more memories according to claim 16 , wherein:

the traffic configuration rules comprise a global limit rule; and

after the sending the traffic configuration rules to the proxy container corresponding to each of the controllers, the acts further comprise:

intercepting a request that does not conform to the global limit rule by the proxy container; or

sending a request that conforms to the global limit rule to the API server.

20. The one or more memories according to claim 16 , wherein:

the traffic configuration rules comprise a sharding routing rule; and

after sending the traffic configuration rules to a proxy container corresponding to each of the controllers, the acts further comprise:

intercepting a webhook request from the API server by the proxy container;

determining that the webhook request conforms to the sharding routing rule of a current instance; and

forwarding the webhook request to a local webhook of the proxy container for processing.