k8s搭建fabric1.4.6环境

文件已上传 https://github.com/lgy1027/fabric-network

直接上配置文件,相关文件生成可参考https://www.jianshu.com/p/a83db64be6b1

order.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: lgy
  name: orderer1
spec:
  replicas: 1
  selector:
    matchLabels:
      orderer-id: orderer1
  template:
    metadata:
      labels:
        app: etcdraft
        role: orderer
        org: orderer-org
        orderer-id: orderer1
    spec:
      nodeSelector:
        orderer: one
      containers:
        - name: orderer1
          image: core.harbor.domain/blockchain/hyperledger/hyperledger/fabric-orderer:1.4.6
          env:
            - name: ORDERER_GENERAL_GENESISMETHOD
              value: file
#            - name: CORE_VM_DOCKER_HOSTCONFIG_NETWORKMODE
#              value: raft_clustor_default
            - name: FABRIC_LOGGING_SPEC
              value: debug
            - name: ORDERER_GENERAL_LISTENADDRESS
              value: 0.0.0.0
            - name: ORDERER_GENERAL_LISTENPORT
              value: "7050"
            - name: ORDERER_GENERAL_GENESISFILE
              value: /var/hyperledger/orderer/orderer.genesis.block
            - name: ORDERER_GENERAL_LOCALMSPID
              value: OrdererMSP
            - name: ORDERER_GENERAL_LOCALMSPDIR
              value: /var/hyperledger/orderer/msp
            - name: ORDERER_GENERAL_TLS_ENABLED
              value: "true"
            - name: ORDERER_GENERAL_TLS_PRIVATEKEY
              value: /var/hyperledger/orderer/tls/server.key
            - name: ORDERER_GENERAL_TLS_CERTIFICATE
              value: /var/hyperledger/orderer/tls/server.crt
            - name: ORDERER_GENERAL_TLS_ROOTCAS
              value: '[/var/hyperledger/orderer/tls/ca.crt]'
            - name: ORDERER_KAFKA_TOPIC_REPLICATIONFACTOR
              value: "1"
            - name: ORDERER_KAFKA_VERBOSE
              value: "true"
            - name: ORDERER_GENERAL_CLUSTER_CLIENTCERTIFICATE
              value: /var/hyperledger/orderer/tls/server.crt
            - name: ORDERER_GENERAL_CLUSTER_CLIENTPRIVATEKEY
              value: /var/hyperledger/orderer/tls/server.key
            - name: ORDERER_GENERAL_CLUSTER_ROOTCAS
              value: '[/var/hyperledger/orderer/tls/ca.crt]'
          workingDir: /opt/gopath/src/github.com/hyperledger/fabric
          command: ["orderer"]
          volumeMounts:
            - mountPath: /var/hyperledger/orderer/orderer.genesis.block
              name: block-dir
            - mountPath: /var/hyperledger/orderer/msp
              name: msp-dir
            - mountPath: /var/hyperledger/orderer/tls
              name: tls-dir
            - mountPath: /var/hyperledger/production/orderer
              name: ledger-dir
          ports:
            - containerPort: 7050
      volumes:
        - name: block-dir
          hostPath:
            path: /opt/lgy/channel-artifacts/genesis.block
        - name: msp-dir
          hostPath:
            path: /opt/lgy/crypto-config/ordererOrganizations/lgy/orderers/orderer1.lgy/msp
        - name: tls-dir
          hostPath:
            path: /opt/lgy/crypto-config/ordererOrganizations/lgy/orderers/orderer1.lgy/tls
        - name: ledger-dir
          hostPath:
            path: /opt/lgy/orderer1_ledger
---
apiVersion: v1
kind: Service
metadata:
  namespace: lgy
  name: orderer1
spec:
  selector:
    app: etcdraft
    role: orderer
    org: orderer-org
    orderer-id: orderer1
  clusterIP: None
  ports:
    - name: listen-endpoint
      protocol: TCP
      port: 7050
---
apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: lgy
  name: orderer2
spec:
  replicas: 1
  selector:
    matchLabels:
      orderer-id: orderer2
  template:
    metadata:
      labels:
        app: etcdraft
        role: orderer
        org: orderer-org
        orderer-id: orderer2
    spec:
      nodeSelector:
        orderer: two
      containers:
        - name: orderer2
          image: core.harbor.domain/blockchain/hyperledger/hyperledger/fabric-orderer:1.4.6
          env:
            - name: ORDERER_GENERAL_GENESISMETHOD
              value: file
#            - name: CORE_VM_DOCKER_HOSTCONFIG_NETWORKMODE
#              value: raft_clustor_default
            - name: FABRIC_LOGGING_SPEC
              value: debug
            - name: ORDERER_GENERAL_LISTENADDRESS
              value: 0.0.0.0
            - name: ORDERER_GENERAL_LISTENPORT
              value: "7050"
            - name: ORDERER_GENERAL_GENESISFILE
              value: /var/hyperledger/orderer/orderer.genesis.block
            - name: ORDERER_GENERAL_LOCALMSPID
              value: OrdererMSP
            - name: ORDERER_GENERAL_LOCALMSPDIR
              value: /var/hyperledger/orderer/msp
            - name: ORDERER_GENERAL_TLS_ENABLED
              value: "true"
            - name: ORDERER_GENERAL_TLS_PRIVATEKEY
              value: /var/hyperledger/orderer/tls/server.key
            - name: ORDERER_GENERAL_TLS_CERTIFICATE
              value: /var/hyperledger/orderer/tls/server.crt
            - name: ORDERER_GENERAL_TLS_ROOTCAS
              value: '[/var/hyperledger/orderer/tls/ca.crt]'
            - name: ORDERER_KAFKA_TOPIC_REPLICATIONFACTOR
              value: "1"
            - name: ORDERER_KAFKA_VERBOSE
              value: "true"
            - name: ORDERER_GENERAL_CLUSTER_CLIENTCERTIFICATE
              value: /var/hyperledger/orderer/tls/server.crt
            - name: ORDERER_GENERAL_CLUSTER_CLIENTPRIVATEKEY
              value: /var/hyperledger/orderer/tls/server.key
            - name: ORDERER_GENERAL_CLUSTER_ROOTCAS
              value: '[/var/hyperledger/orderer/tls/ca.crt]'
          workingDir: /opt/gopath/src/github.com/hyperledger/fabric
          command: ["orderer"]
          volumeMounts:
            - mountPath: /var/hyperledger/orderer/orderer.genesis.block
              name: block-dir
            - mountPath: /var/hyperledger/orderer/msp
              name: msp-dir
            - mountPath: /var/hyperledger/orderer/tls
              name: tls-dir
            - mountPath: /var/hyperledger/production/orderer
              name: ledger-dir
          ports:
            - containerPort: 7050
      volumes:
        - name: block-dir
          hostPath:
            path: /opt/lgy/channel-artifacts/genesis.block
        - name: msp-dir
          hostPath:
            path: /opt/lgy/crypto-config/ordererOrganizations/lgy/orderers/orderer2.lgy/msp
        - name: tls-dir
          hostPath:
            path: /opt/lgy/crypto-config/ordererOrganizations/lgy/orderers/orderer2.lgy/tls
        - name: ledger-dir
          hostPath:
            path: /opt/lgy/orderer2_ledger
---
apiVersion: v1
kind: Service
metadata:
  namespace: lgy
  name: orderer2
spec:
  selector:
    app: etcdraft
    role: orderer
    org: orderer-org
    orderer-id: orderer2
  clusterIP: None
  ports:
    - name: listen-endpoint
      protocol: TCP
      port: 7050
---
apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: lgy
  name: orderer3
spec:
  replicas: 1
  selector:
    matchLabels:
      orderer-id: orderer3
  template:
    metadata:
      labels:
        app: etcdraft
        role: orderer
        org: orderer-org
        orderer-id: orderer3
    spec:
      nodeSelector:
        orderer: three
      containers:
        - name: orderer3
          image: core.harbor.domain/blockchain/hyperledger/hyperledger/fabric-orderer:1.4.6
          env:
            - name: ORDERER_GENERAL_GENESISMETHOD
              value: file
#            - name: CORE_VM_DOCKER_HOSTCONFIG_NETWORKMODE
#              value: raft_clustor_default
            - name: FABRIC_LOGGING_SPEC
              value: debug
            - name: ORDERER_GENERAL_LISTENADDRESS
              value: 0.0.0.0
            - name: ORDERER_GENERAL_LISTENPORT
              value: "7050"
            - name: ORDERER_GENERAL_GENESISFILE
              value: /var/hyperledger/orderer/orderer.genesis.block
            - name: ORDERER_GENERAL_LOCALMSPID
              value: OrdererMSP
            - name: ORDERER_GENERAL_LOCALMSPDIR
              value: /var/hyperledger/orderer/msp
            - name: ORDERER_GENERAL_TLS_ENABLED
              value: "true"
            - name: ORDERER_GENERAL_TLS_PRIVATEKEY
              value: /var/hyperledger/orderer/tls/server.key
            - name: ORDERER_GENERAL_TLS_CERTIFICATE
              value: /var/hyperledger/orderer/tls/server.crt
            - name: ORDERER_GENERAL_TLS_ROOTCAS
              value: '[/var/hyperledger/orderer/tls/ca.crt]'
            - name: ORDERER_KAFKA_TOPIC_REPLICATIONFACTOR
              value: "1"
            - name: ORDERER_KAFKA_VERBOSE
              value: "true"
            - name: ORDERER_GENERAL_CLUSTER_CLIENTCERTIFICATE
              value: /var/hyperledger/orderer/tls/server.crt
            - name: ORDERER_GENERAL_CLUSTER_CLIENTPRIVATEKEY
              value: /var/hyperledger/orderer/tls/server.key
            - name: ORDERER_GENERAL_CLUSTER_ROOTCAS
              value: '[/var/hyperledger/orderer/tls/ca.crt]'
          workingDir: /opt/gopath/src/github.com/hyperledger/fabric
          command: ["orderer"]
          volumeMounts:
            - mountPath: /var/hyperledger/orderer/orderer.genesis.block
              name: block-dir
            - mountPath: /var/hyperledger/orderer/msp
              name: msp-dir
            - mountPath: /var/hyperledger/orderer/tls
              name: tls-dir
            - mountPath: /var/hyperledger/production/orderer
              name: ledger-dir
          ports:
            - containerPort: 7050
      volumes:
        - name: block-dir
          hostPath:
            path: /opt/lgy/channel-artifacts/genesis.block
        - name: msp-dir
          hostPath:
            path: /opt/lgy/crypto-config/ordererOrganizations/lgy/orderers/orderer3.lgy/msp
        - name: tls-dir
          hostPath:
            path: /opt/lgy/crypto-config/ordererOrganizations/lgy/orderers/orderer3.lgy/tls
        - name: ledger-dir
          hostPath:
            path: /opt/lgy/orderer3_ledger
---
apiVersion: v1
kind: Service
metadata:
  namespace: lgy
  name: orderer3
spec:
  selector:
    app: etcdraft
    role: orderer
    org: orderer-org
    orderer-id: orderer3
  clusterIP: None
  ports:
    - name: listen-endpoint
      protocol: TCP
      port: 7050

peer.yaml

apiVersion: apps/v1
kind: StatefulSet
metadata:
  namespace: lgy
  name: peer0-org
spec:
  selector:
    matchLabels:
      peer-id: peer0
  serviceName: "peer0"
  replicas: 1
  template:
    metadata:
      labels:
        app: etcdraft
        role: peer
        peer-id: peer0
        org: peer-org
    spec:
      nodeSelector:
        peer: two
      containers:
        - name: peer0-org
          image: core.harbor.domain/blockchain/hyperledger/hyperledger/fabric-peer:1.4.6
          env:
            - name: CORE_VM_ENDPOINT
              value: "unix:///host/var/run/docker.sock"
            - name: CORE_PEER_LISTENADDRESS
#              value: "0.0.0.0:7051"
#            - name: CORE_VM_DOCKER_HOSTCONFIG_NETWORKMODE
#              value: "raft_clustor_default"
            - name: FABRIC_LOGGING_SPEC
              value: "DEBUG"
            - name: CORE_PEER_TLS_ENABLED
              value: "true"
            - name: CORE_PEER_GOSSIP_USELEADERELECTION
              value: "true"
            - name: CORE_PEER_GOSSIP_ORGLEADER
              value: "false"
            - name: CORE_PEER_PROFILE_ENABLED
              value: "true"
            - name: CORE_PEER_TLS_CERT_FILE
              value: "/etc/hyperledger/fabric/tls/server.crt"
            - name: CORE_PEER_TLS_KEY_FILE
              value: "/etc/hyperledger/fabric/tls/server.key"
            - name: CORE_PEER_TLS_ROOTCERT_FILE
              value: "/etc/hyperledger/fabric/tls/ca.crt"
            - name: CORE_PEER_ID
              value: "peer0.lgy.svc.cluster.local"
            - name: CORE_PEER_ADDRESS
              value: "peer0.lgy.svc.cluster.local:7051"
            #        - name: CORE_PEER_GOSSIP_BOOTSTRAP
            #          value: "peer0.lgy:7051"
            - name: CORE_PEER_GOSSIP_EXTERNALENDPOINT
              value: "peer0.lgy.svc.cluster.local:7051"
            - name: CORE_PEER_CHAINCODELISTENADDRESS
              value: "0.0.0.0:7052"
            - name: CORE_PEER_CHAINCODEADDRESS
              value: "peer0.lgy.svc.cluster.local:7052"
            - name: CORE_PEER_LOCALMSPID
              value: "Org1MSP"
          workingDir: /opt/gopath/src/github.com/hyperledger/fabric/peer
          ports:
            - containerPort: 7051
            - containerPort: 7052
            - containerPort: 7053
          command: ["peer"]
          args: ["node","start"]
          volumeMounts:
            - mountPath: /etc/hyperledger/fabric/msp
              name: msp-dir
            - mountPath: /etc/hyperledger/fabric/tls
              name: tls-dir
            - mountPath: /host/var/run/
              name: run
            - mountPath: /var/hyperledger/production
              name: ledger-dir
      volumes:
        - name: msp-dir
          hostPath:
            path: /opt/lgy/crypto-config/peerOrganizations/lgy.svc.cluster.local/peers/peer0.lgy.svc.cluster.local/msp
        - name: tls-dir
          hostPath:
            path: /opt/lgy/crypto-config/peerOrganizations/lgy.svc.cluster.local/peers/peer0.lgy.svc.cluster.local/tls
        - name: run
          hostPath:
            path: /var/run
        - name: ledger-dir
          hostPath:
            path: /opt/lgy/peer0_ledger
---
apiVersion: v1
kind: Service
metadata:
  namespace: lgy
  name: peer0
spec:
  selector:
    app: etcdraft
    role: peer
    peer-id: peer0
    org: peer-org
  clusterIP: None
  ports:
    - name: listen-endpoint
      protocol: TCP
      port: 7051

    - name: chaincode-listen
      protocol: TCP
      port: 7052

    - name: event-listen
      protocol: TCP
      port: 7053
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  namespace: lgy
  name: peer1-org
spec:
  selector:
    matchLabels:
      peer-id: peer1
  serviceName: "peer1"
  replicas: 1
  template:
    metadata:
      labels:
        app: etcdraft
        role: peer
        peer-id: peer1
        org: peer-org
    spec:
      nodeSelector:
        peer: one
      containers:
        - name: peer1-org
          image: core.harbor.domain/blockchain/hyperledger/hyperledger/fabric-peer:1.4.6
          env:
            - name: CORE_VM_ENDPOINT
              value: "unix:///host/var/run/docker.sock"
            - name: CORE_PEER_LISTENADDRESS
              value: "0.0.0.0:7051"
#            - name: CORE_VM_DOCKER_HOSTCONFIG_NETWORKMODE
#              value: "raft_clustor_default"
            - name: FABRIC_LOGGING_SPEC
              value: "DEBUG"
            - name: CORE_PEER_TLS_ENABLED
              value: "true"
            - name: CORE_PEER_GOSSIP_USELEADERELECTION
              value: "true"
            - name: CORE_PEER_GOSSIP_ORGLEADER
              value: "false"
            - name: CORE_PEER_PROFILE_ENABLED
              value: "true"
            - name: CORE_PEER_TLS_CERT_FILE
              value: "/etc/hyperledger/fabric/tls/server.crt"
            - name: CORE_PEER_TLS_KEY_FILE
              value: "/etc/hyperledger/fabric/tls/server.key"
            - name: CORE_PEER_TLS_ROOTCERT_FILE
              value: "/etc/hyperledger/fabric/tls/ca.crt"
            - name: CORE_PEER_ID
              value: "peer1.lgy.svc.cluster.local"
            - name: CORE_PEER_ADDRESS
              value: "peer1.lgy.svc.cluster.local:7051"
            #        - name: CORE_PEER_GOSSIP_BOOTSTRAP
            #          value: "peer0.lgy:7051"
            - name: CORE_PEER_GOSSIP_EXTERNALENDPOINT
              value: "peer1.lgy.svc.cluster.local:7051"
            - name: CORE_PEER_CHAINCODELISTENADDRESS
              value: "0.0.0.0:7052"
            - name: CORE_PEER_CHAINCODEADDRESS
              value: "peer1.lgy.svc.cluster.local:7052"
            - name: CORE_PEER_LOCALMSPID
              value: "Org1MSP"
          workingDir: /opt/gopath/src/github.com/hyperledger/fabric/peer
          ports:
            - containerPort: 7051
            - containerPort: 7052
            - containerPort: 7053
          command: ["peer"]
          args: ["node","start"]
          volumeMounts:
            - mountPath: /etc/hyperledger/fabric/msp
              name: msp-dir
            - mountPath: /etc/hyperledger/fabric/tls
              name: tls-dir
            - mountPath: /host/var/run/
              name: run
            - mountPath: /var/hyperledger/production
              name: ledger-dir
      volumes:
        - name: msp-dir
          hostPath:
            path: /opt/lgy/crypto-config/peerOrganizations/lgy.svc.cluster.local/peers/peer1.lgy.svc.cluster.local/msp
        - name: tls-dir
          hostPath:
            path: /opt/lgy/crypto-config/peerOrganizations/lgy.svc.cluster.local/peers/peer1.lgy.svc.cluster.local/tls
        - name: run
          hostPath:
            path: /var/run
        - name: ledger-dir
          hostPath:
            path: /opt/lgy/peer1_ledger
---
apiVersion: v1
kind: Service
metadata:
  namespace: lgy
  name: peer1
spec:
  selector:
    app: etcdraft
    role: peer
    peer-id: peer1
    org: peer-org
  clusterIP: None
  ports:
    - name: listen-endpoint
      protocol: TCP
      port: 7051

    - name: chaincode-listen
      protocol: TCP
      port: 7052

    - name: event-listen
      protocol: TCP
      port: 7053

注意点：k8s管理peer后配置的

CORE_VM_ENDPOINT:unix:///host/var/run/docker.sock

sdk配置文件

version: 1.0.0

client:
  organization: Org1MSP
  logging:
    level: debug
  cryptoconfig:
    path: /fabricServer/crypto-config
  credentialStore:
    path: /tmp/raft-store
    cryptoStore:
      path: /tmp/raft-msp
  BCCSP:
    security:
      enabled: true
      default:
        provider: "SW"
      hashAlgorithm: "SHA2"
      softVerify: true
      level: 256
  tlsCerts:
    systemCertPool: false
    client:
      key:
        path:
      cert:
        path:

channels:
  lgychannel:
    peers:
      peer0.lgy.svc.cluster.local:
        endorsingPeer: true
        chaincodeQuery: true
        ledgerQuery: true
        eventSource: true

      peer1.lgy.svc.cluster.local:
        endorsingPeer: true
        chaincodeQuery: true
        ledgerQuery: true
        eventSource: true

    policies:
      queryChannelConfig:
        minResponses: 1
        maxTargets: 1
        retryOpts:
          attempts: 5
          initialBackoff: 500ms
          maxBackoff: 5s
          backoffFactor: 2.0
      discovery:
        maxTargets: 2
        retryOpts:
          attempts: 4
          initialBackoff: 500ms
          maxBackoff: 5s
          backoffFactor: 2.0
      eventService:
        resolverStrategy: PreferOrg
        balancer: Random
        blockHeightLagThreshold: 5
        reconnectBlockHeightLagThreshold: 10
        peerMonitorPeriod: 5s

organizations:
  Org1MSP:
    mspid: Org1MSP
    cryptoPath: peerOrganizations/lgy.svc.cluster.local/users/{userName}@lgy.svc.cluster.local/msp
    peers:
      - peer0.lgy.svc.cluster.local
      - peer1.lgy.svc.cluster.local

    certificateAuthorities:
      - ca.lgy.svc.cluster.local

  # Orderer组织名称
  ordererorg:
    # 组织的MSPID
    mspID: OrdererMSP
    # 加载用户需要的密钥和证书，绝对路径或相对路径
    cryptoPath: ordererOrganizations/lgy/users/{username}@lgy/msp

# 发送交易请求或通道创建、更新请求到的orderers列表
# 如果定义了超过一个orderer，SDK使用哪一个orderer由代码实现时指定
orderers:
  # orderer节点，可以定义多个
  orderer1.lgy:
    url: orderer1.lgy:7050
    # 以下属性由gRPC库定义，会被传递给gRPC客户端构造函数
    grpcOptions:
      ssl-target-name-override: orderer1.lgy
      # 下列参数用于设置服务器上的keepalive策略，不兼容的设置会导致连接关闭
      # 当keep-alive-time被设置为0或小于激活客户端的参数，下列参数失效
      keep-alive-time: 0s
      keep-alive-timeout: 20s
      keep-alive-permit: false
      fail-fast: false
      allow-insecure: false
    # 证书的绝对路径
    tlsCACerts:
      # Certificate location absolute path
      path: /fabricServer/crypto-config/ordererOrganizations/lgy/tlsca/tlsca.lgy-cert.pem

# peers节点列表
peers:
  # peer节点定义，可以定义多个
  peer0.lgy.svc.cluster.local:
    # this URL is used to send endorsement and query requests
    # URL用于发送背书和查询请求
    url: peer0.lgy.svc.cluster.local:7051
    # eventUrl is only needed when using eventhub (default is delivery service)
    eventUrl: peer0.lgy.svc.cluster.local:7053

    grpcOptions:
      ssl-target-name-override: peer0.lgy.svc.cluster.local
      # These parameters should be set in coordination with the keepalive policy on the server,
      # as incompatible settings can result in closing of connection.
      # When duration of the 'keep-alive-time' is set to 0 or less the keep alive client parameters are disabled
      keep-alive-time: 0s
      keep-alive-timeout: 20s
      keep-alive-permit: false
      fail-fast: false
      # allow-insecure will be taken into consideration if address has no protocol defined, if true then grpc or else grpcs
      allow-insecure: false
    # 证书的绝对路径
    tlsCACerts:
      # Certificate location absolute path
      path: /fabricServer/crypto-config/peerOrganizations/lgy.svc.cluster.local/tlsca/tlsca.lgy.svc.cluster.local-cert.pem

  peer1.lgy.svc.cluster.local:
    # this URL is used to send endorsement and query requests
    url: peer1.lgy.svc.cluster.local:7051
    # eventUrl is only needed when using eventhub (default is delivery service)
    eventUrl: peer1.lgy.svc.cluster.local:7053

    grpcOptions:
      ssl-target-name-override: peer1.lgy.svc.cluster.local
      # These parameters should be set in coordination with the keepalive policy on the server,
      # as incompatible settings can result in closing of connection.
      # When duration of the 'keep-alive-time' is set to 0 or less the keep alive client parameters are disabled
      keep-alive-time: 0s
      keep-alive-timeout: 20s
      keep-alive-permit: false
      fail-fast: false
      # allow-insecure will be taken into consideration if address has no protocol defined, if true then grpc or else grpcs
      allow-insecure: false

    tlsCACerts:
      # Certificate location absolute path
      path: /fabricServer/crypto-config/peerOrganizations/lgy.svc.cluster.local/tlsca/tlsca.lgy.svc.cluster.local-cert.pem

certificateAuthorities:

  ca.lgy.svc.cluster.local:
    url: http://ca.lgy.svc.cluster.local:7054
    tlsCACerts:

      path: /fabricServer/crypto-config/peerOrganizations/lgy.svc.cluster.local/tlsca/tlsca.lgy.svc.cluster.local-cert.pem

    registrar:
      enrollId: admin
      enrollSecret: adminpw
    # [Optional] The optional name of the CA.
    caName: ca.lgy.svc.cluster.local

entityMatchers:
  peer:
    - pattern: (\w*)peer0.lgy.svc.cluster.local(\w*)
      urlSubstitutionExp: peer0.lgy.svc.cluster.local:7051
      eventUrlSubstitutionExp: peer0.lgy.svc.cluster.local:7053
      sslTargetOverrideUrlSubstitutionExp: peer0.lgy.svc.cluster.local
      mappedHost: peer0.lgy.svc.cluster.local

    - pattern: (\w*)peer1.lgy.svc.cluster.local(\w*)
      urlSubstitutionExp: peer1.lgy.svc.cluster.local:7051
      eventUrlSubstitutionExp: peer1.lgy.svc.cluster.local:7053
      sslTargetOverrideUrlSubstitutionExp: peer1.lgy.svc.cluster.local
      mappedHost: peer1.lgy.svc.cluster.local

  orderer:
    - pattern: (\w*)orderer1.lgy(\w*)
      urlSubstitutionExp: orderer1.lgy:7050
      sslTargetOverrideUrlSubstitutionExp: orderer1.lgy
      mappedHost: orderer1.lgy

  certificateAuthorities:
    - pattern: (\w*)ca.lgy.svc.cluster.local(\w*)
      urlSubstitutionExp: http://ca.lgy.svc.cluster.local:7054
      mappedHost: ca.lgy.svc.cluster.local

sdk.yaml(服务端)

apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: lgy
  name: sdk
spec:
  replicas: 1
  selector:
    matchLabels:
      sdk-id: sdk
  template:
    metadata:
      labels:
       sdk-id: sdk
    spec:
      nodeSelector:
        peer: one
      volumes:
       - name: fabric-dir
         hostPath:
            path: /opt/lgy/log
      containers:
        - name: sdk
          image: core.harbor.domain/blockchain/hyperledger/fabric_sdk:v1
          workingDir: /fabricServer
          command: ["sh"]
          args: ["-c","./fabricServer -cc=false -jc=false -icc=false -itcc=false -ucc=false"]
          ports:
           - containerPort: 8899
          volumeMounts:
           - mountPath: /fabricServer/log
             name: fabric-dir
---
apiVersion: v1
kind: Service
metadata:
   namespace: lgy
   name: sdk-service
spec:
 selector:
   sdk-id: sdk
 ports:
   - name: sdk-port
     protocol: TCP
     port: 8899

问题：

J5FD6KN@8(J5R21%ORMTJU3.png

在 Fabric 设计中， chaincode 目前是以 Docker 容器的方式运行在 peer 容器所在的宿主机上，peer 容器需要调用 Docker 引擎的接口来构建和创建 chaincode 容器，调用接口是通过这个连接：

unix:///var/run/docker.sock

通过 docker.sock 创建的容器脱离在 Kubernetes 的体系之外，虽然它仍在 Flannel 的网络上，但却无法获得 peer 节点的 IP 地址。这是因为创建该容器的 Docker 引擎使用宿主机默认的 DNS 解析来 peer 的域名，所以无法找到。

为了解决解析域名的问题，需要在每个 worker 的 DOCKER_OPTS 中加入相关参数，我的 kube-dns 的 IP 为10.68.0.2，宿主机网络 DNS 的 IP 地址假设为 10.4.246.1，为使得 chaincode 的容器可以解析到 peer 节点，在每个 Docker 节点，修改步骤如下：

# echo 'DOCKER_OPTS="--dns=10.68.0.2 --dns=10.4.246.1 --dns-search default.svc.cluster.local --dns-search svc.cluster.local --dns-opt ndots:2 --dns-opt timeout:2 --dns-opt attempts:2"' >> /etc/default/docker
# echo 'EnvironmentFile=-/etc/default/docker' >> /etc/systemd/system/docker.service
# systemctl daemon-reload && systemctl restart docker && systemctl status docker