{"id":1429,"date":"2023-05-21T14:54:00","date_gmt":"2023-05-21T06:54:00","guid":{"rendered":"http:\/\/blog.sway.com.cn\/?p=1429"},"modified":"2023-05-21T14:57:04","modified_gmt":"2023-05-21T06:57:04","slug":"%e5%9c%a8k8s-1-23-17%e9%9b%86%e7%be%a4%e4%b8%ad%e4%bd%bf%e7%94%a8ingress-nginx%e6%9a%b4%e9%9c%b2%e6%9c%8d%e5%8a%a1","status":"publish","type":"post","link":"http:\/\/blog.sway.com.cn\/?p=1429","title":{"rendered":"\u5728k8s-1.23.17\u96c6\u7fa4\u4e2d\u4f7f\u7528ingress-nginx\u66b4\u9732\u670d\u52a1"},"content":{"rendered":"\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

\u672c\u4eba\u8f6c\u8f7d\u5e76\u4fee\u6539\u4e8e\u539f\u6587\u300aingress-nginx\u8be6\u89e3\u548c\u90e8\u7f72\u65b9\u6848\u300b\uff0c\u51fa\u5904\uff1ahttps:\/\/blog.csdn.net\/weixin_44729138\/article\/details\/105978555<\/p>\n\n\n\n

\u5728\u6b64\u5148\u611f\u8c22\u539f\u4f5c\u8005\u7684\u5949\u732e\u3002<\/p>\n\n\n\n

1\u3001ingress\u4ecb\u7ecd<\/h2>\n\n\n\n

K8s\u96c6\u7fa4\u5bf9\u5916\u66b4\u9732\u670d\u52a1\u7684\u65b9\u5f0f\u76ee\u524d\u53ea\u6709\u4e09\u79cd\uff1a
Loadblancer\uff1bNodeport\uff1bingress
\u524d\u4e24\u79cd\u719f\u6089\u8d77\u6765\u6bd4\u8f83\u5feb\uff0c\u800c\u4e14\u4f7f\u7528\u8d77\u6765\u4e5f\u6bd4\u8f83\u65b9\u4fbf\uff0c\u5728\u6b64\u5c31\u4e0d\u8fdb\u884c\u4ecb\u7ecd\u4e86\u3002<\/p>\n\n\n\n

\u4e0b\u9762\u8be6\u7ec6\u8bb2\u89e3\u4e0bingress\u8fd9\u4e2a\u670d\u52a1\uff0cingress\u7531\u4e24\u90e8\u5206\u7ec4\u6210\uff1a<\/p>\n\n\n\n

ingress controller\uff1a\u5c06\u65b0\u52a0\u5165\u7684Ingress\u8f6c\u5316\u6210Nginx\u7684\u914d\u7f6e\u6587\u4ef6\u5e76\u4f7f\u4e4b\u751f\u6548
ingress\u670d\u52a1\uff1a\u5c06Nginx\u7684\u914d\u7f6e\u62bd\u8c61\u6210\u4e00\u4e2aIngress\u5bf9\u8c61\uff0c\u6bcf\u6dfb\u52a0\u4e00\u4e2a\u65b0\u7684\u670d\u52a1\u53ea\u9700\u5199\u4e00\u4e2a\u65b0\u7684Ingress\u7684yaml\u6587\u4ef6\u5373\u53ef
\u5176\u4e2dingress controller\u76ee\u524d\u4e3b\u8981\u6709\u4e24\u79cd\uff1a\u57fa\u4e8enginx\u670d\u52a1\u7684ingress controller\u548c\u57fa\u4e8etraefik\u7684ingress controller\u3002
\u800c\u5176\u4e2dtraefik\u7684ingress controller\uff0c\u76ee\u524d\u652f\u6301http\u548chttps\u534f\u8bae\u3002\u7531\u4e8e\u5bf9nginx\u6bd4\u8f83\u719f\u6089\uff0c\u800c\u4e14\u9700\u8981\u4f7f\u7528TCP\u8d1f\u8f7d\uff0c\u6240\u4ee5\u5728\u6b64\u6211\u4eec\u9009\u62e9\u7684\u662f\u57fa\u4e8enginx\u670d\u52a1\u7684ingress controller\u3002
\u4f46\u662f\u57fa\u4e8enginx\u670d\u52a1\u7684ingress controller\u6839\u636e\u4e0d\u540c\u7684\u5f00\u53d1\u516c\u53f8\uff0c\u53c8\u5206\u4e3ak8s\u793e\u533a\u7684ingres-nginx\u548cnginx\u516c\u53f8\u7684nginx-ingress\u3002
\u5728\u6b64\u6839\u636egithub\u4e0a\u7684\u6d3b\u8dc3\u5ea6\u548c\u5173\u6ce8\u4eba\u6570\uff0c\u6211\u4eec\u9009\u62e9\u7684\u662fk8s\u793e\u533a\u7684ingres-nginx\u3002<\/p>\n\n\n\n

<\/p>\n\n\n\n

k8s\u793e\u533a\u63d0\u4f9b\u7684ingress\uff0cgithub\u5730\u5740\u5982\u4e0b\uff1a<\/p>\n\n\n\n

https:\/\/github.com\/kubernetes\/ingress-nginx<\/a><\/p>\n\n\n\n

nginx\u793e\u533a\u63d0\u4f9b\u7684ingress\uff0cgithub\u5730\u5740\u5982\u4e0b\uff1a<\/p>\n\n\n\n

https:\/\/github.com\/nginxinc\/kubernetes-ingress<\/a><\/p>\n\n\n\n

<\/p>\n\n\n\n

<\/p>\n\n\n\n

2\u3001ingress\u7684\u5de5\u4f5c\u539f\u7406<\/h2>\n\n\n\n

ingress\u5177\u4f53\u7684\u5de5\u4f5c\u539f\u7406\u5982\u4e0b:
step1\uff1aingress contronler\u901a\u8fc7\u4e0ek8s\u7684api\u8fdb\u884c\u4ea4\u4e92\uff0c\u52a8\u6001\u7684\u53bb\u611f\u77e5k8s\u96c6\u7fa4\u4e2dingress\u670d\u52a1\u89c4\u5219\u7684\u53d8\u5316\uff0c\u7136\u540e\u8bfb\u53d6\u5b83\uff0c\u5e76\u6309\u7167\u5b9a\u4e49\u7684ingress\u89c4\u5219\uff0c\u8f6c\u53d1\u5230k8s\u96c6\u7fa4\u4e2d\u5bf9\u5e94\u7684service\u3002
step2\uff1a\u800c\u8fd9\u4e2aingress\u89c4\u5219\u5199\u660e\u4e86\u54ea\u4e2a\u57df\u540d\u5bf9\u5e94k8s\u96c6\u7fa4\u4e2d\u7684\u54ea\u4e2aservice\uff0c\u7136\u540e\u518d\u6839\u636eingress-controller\u4e2d\u7684nginx\u914d\u7f6e\u6a21\u677f\uff0c\u751f\u6210\u4e00\u6bb5\u5bf9\u5e94\u7684nginx\u914d\u7f6e\u3002
step3\uff1a\u7136\u540e\u518d\u628a\u8be5\u914d\u7f6e\u52a8\u6001\u7684\u5199\u5230ingress-controller\u7684pod\u91cc\uff0c\u8be5ingress-controller\u7684pod\u91cc\u9762\u8fd0\u884c\u7740\u4e00\u4e2anginx\u670d\u52a1\uff0c\u63a7\u5236\u5668\u4f1a\u628a\u751f\u6210\u7684nginx\u914d\u7f6e\u5199\u5165\u5230nginx\u7684\u914d\u7f6e\u6587\u4ef6\u4e2d\uff0c\u7136\u540ereload\u4e00\u4e0b\uff0c\u4f7f\u5176\u914d\u7f6e\u751f\u6548,\u4ee5\u6b64\u6765\u8fbe\u5230\u57df\u540d\u5206\u914d\u7f6e\u53ca\u52a8\u6001\u66f4\u65b0\u7684\u6548\u679c\u3002<\/p>\n\n\n\n

<\/p>\n\n\n\n

3\u3001ingress\u53ef\u4ee5\u89e3\u51b3\u7684\u95ee\u9898<\/h2>\n\n\n\n

1\uff09\u52a8\u6001\u914d\u7f6e\u670d\u52a1<\/strong>
\u5982\u679c\u6309\u7167\u4f20\u7edf\u65b9\u5f0f, \u5f53\u65b0\u589e\u52a0\u4e00\u4e2a\u670d\u52a1\u65f6, \u6211\u4eec\u53ef\u80fd\u9700\u8981\u5728\u6d41\u91cf\u5165\u53e3\u52a0\u4e00\u4e2a\u53cd\u5411\u4ee3\u7406\u6307\u5411\u6211\u4eec\u65b0\u7684k8s\u670d\u52a1. \u800c\u5982\u679c\u7528\u4e86Ingress, \u53ea\u9700\u8981\u914d\u7f6e\u597d\u8fd9\u4e2a\u670d\u52a1, \u5f53\u670d\u52a1\u542f\u52a8\u65f6, \u4f1a\u81ea\u52a8\u6ce8\u518c\u5230Ingress\u7684\u4e2d, \u4e0d\u9700\u8981\u800c\u5916\u7684\u64cd\u4f5c\u3002<\/p>\n\n\n\n

2\uff09\u51cf\u5c11\u4e0d\u5fc5\u8981\u7684\u7aef\u53e3\u66b4\u9732<\/strong>
\u914d\u7f6e\u8fc7k8s\u7684\u90fd\u6e05\u695a, \u7b2c\u4e00\u6b65\u662f\u8981\u5173\u95ed\u9632\u706b\u5899\u7684, \u4e3b\u8981\u539f\u56e0\u662fk8s\u7684\u5f88\u591a\u670d\u52a1\u4f1a\u4ee5NodePort\u65b9\u5f0f\u6620\u5c04\u51fa\u53bb, \u8fd9\u6837\u5c31\u76f8\u5f53\u4e8e\u7ed9\u5bbf\u4e3b\u673a\u6253\u4e86\u5f88\u591a\u5b54, \u65e2\u4e0d\u5b89\u5168\u4e5f\u4e0d\u4f18\u96c5. \u800cIngress\u53ef\u4ee5\u907f\u514d\u8fd9\u4e2a\u95ee\u9898, \u9664\u4e86Ingress\u81ea\u8eab\u670d\u52a1\u53ef\u80fd\u9700\u8981\u6620\u5c04\u51fa\u53bb, \u5176\u4ed6\u670d\u52a1\u90fd\u4e0d\u8981\u7528NodePort\u65b9\u5f0f\u3002<\/p>\n\n\n\n

<\/p>\n\n\n\n

4\u3001\u90e8\u7f72ingress\uff08deployment\u7684\u65b9\u5f0f\uff09<\/h2>\n\n\n\n

\u67e5\u770b\u5f53\u524d\u7248api\u7248\u672c\uff1a<\/p>\n\n\n\n

kubectl explain Ingress<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u6ce8\uff1a\u67e5\u770bingress\u548c\u81ea\u5df1\u672c\u5730\u7684k8s\u7248\u672c\u662f\u5426\u5bf9\u5e94\u4e0a\uff0c\u5728GitHub<\/a>\u4e0a\u6709\u8868\u683c\u53c2\u8003\u3002<\/strong><\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
<\/p>\n\n\n\n
\u4e0b\u8f7d\u914d\u7f6e\u6587\u4ef6\uff1a<\/p>\n\n\n\n
mkdir -p \/root\/ingress && cd \/root\/ingress\nwget https:\/\/raw.githubusercontent.com\/kubernetes\/ingress-nginx\/controller-v1.1.3\/deploy\/static\/provider\/baremetal\/deploy.yaml<\/pre>\n\n\n\n
\u67e5\u770b\u6e90\uff1a<\/p>\n\n\n\n
cat deploy.yaml | grep image:<\/pre>\n\n\n\n
\u66ff\u6362\u955c\u50cf\uff1a<\/p>\n\n\n\n
sed  -i 's#k8s.gcr.io\/ingress-nginx\/controller:v1.1.3@sha256:31f47c1e202b39fadecf822a9b76370bd4baed199a005b3e7d4d1455f4fd3fe2#registry.cn-hangzhou.aliyuncs.com\/imges\/controller:v1.1.3#' deploy.yaml\nsed  -i 's#k8s.gcr.io\/ingress-nginx\/kube-webhook-certgen:v1.1.1@sha256:64d8c73dca984af206adf9d6d7e46aa550362b1d7a01f3a0a91b20cc67868660#registry.cn-hangzhou.aliyuncs.com\/chenby\/kube-webhook-certgen:v1.1.1#' deploy.yaml<\/pre>\n\n\n\n
\u6ce8\u610f\uff1a\u6709\u4e9b\u7248\u672c\u7684ingress-nginx\u7684\u914d\u7f6e\u914d\u7f6e\u6587\u4ef6\u7684type\u9ed8\u8ba4\u4e3aLoadBalaner\uff0c\u9700\u8981\u66b4\u9732\u7684\u670d\u52a1\u5176\u540e\u7aefsvc\u8bbf\u95ee\u7c7b\u578b\u9700\u8981\u6539\u6210NodePort\uff1a<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u53e6\u5916\uff0cingress-controller\u7684\u5b98\u65b9yaml\u9ed8\u8ba4\u6ce8\u91ca\u4e86hostNetwork \u5de5\u4f5c\u65b9\u5f0f\uff0c\u4ee5\u9632\u6b62\u7aef\u53e3\u7684\u5728\u5bbf\u4e3b\u673a\u7684\u51b2\u7a81\uff0c\u6ca1\u6709\u7ed1\u5b9a\u5230\u5bbf\u4e3b\u673a 80 \u7aef\u53e3\uff0c\u56e0\u6b64\u8fd8\u8981\u5728\u540d\u4e3aingress-nginx-controller\u7684Deployment\u914d\u7f6e\u7684spec\u4e0b\u589e\u52a0\u201chostNetwork: true\u201d\u7684\u5c5e\u6027\uff1a<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u542f\u52a8POD\uff1a<\/p>\n\n\n\n
kubectl apply -f deploy.yaml<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u67e5\u770bpod\u8fd0\u884c\u60c5\u51b5\uff1a<\/p>\n\n\n\n
kubectl get pod -n ingress-nginx<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u542f\u52a8\u65f6\u95f4\u6709\u70b9\u957f\uff0c\u6700\u7ec8\u7684\u8fd0\u884c\u7ed3\u679c\u5e94\u8be5\u662f\u8fd9\u6837\u7684\uff1a<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u8bf4\u660e\uff1astatus\u4e3acompleted\u7684\u4e24\u4e2apod\u4e3ajob\u7c7b\u578b\u8d44\u6e90\uff0ccompleted\u8868\u793ajob\u5df2\u7ecf\u6210\u529f\u6267\u884c\u65e0\u9700\u7ba1\u5b83\u3002<\/p>\n\n\n\n
\u67e5\u770bsvc\u8fd0\u884c\u60c5\u51b5\uff1a<\/p>\n\n\n\n
kubectl get svc -n ingress-nginx<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u67e5\u770bcontroller\u6240\u5728\u7684\u5de5\u4f5c\u8282\u70b9\uff1a<\/p>\n\n\n\n
kubectl get pods -n ingress-nginx -o wide<\/pre>\n\n\n\n
\"\"<\/a>
\u8fdb\u5165\u5bf9\u5e94\u7684\u8282\u70b9\u73af\u5883\u4e2d\uff0c\u67e5\u770b\u662f\u542680\u7aef\u53e3\u5df2\u7ecf\u5f00\u542f\uff1a<\/figcaption><\/figure>\n\n\n\n
[root@k8s-node03 ~]# netstat -lnp|grep 80<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u81f3\u6b64\uff0cingress-nginx\u90e8\u7f72\u6210\u529f\u3002<\/p>\n\n\n\n
<\/p>\n\n\n\n
5\u3001\u542f\u7528\u9ed8\u8ba4\u540e\u7aef<\/h2>\n\n\n\n
mkdir -p \/root\/ingress ; cd \/root\/ingress\ncat > backend.yaml <<EOF\napiVersion: apps\/v1\nkind: Deployment\nmetadata:\n  name: default-http-backend\n  labels:\n    app.kubernetes.io\/name: default-http-backend\n  namespace: kube-system\nspec:\n  replicas: 1\n  selector:\n    matchLabels:\n      app.kubernetes.io\/name: default-http-backend\n  template:\n    metadata:\n      labels:\n        app.kubernetes.io\/name: default-http-backend\n    spec:\n      terminationGracePeriodSeconds: 60\n      containers:\n      - name: default-http-backend\n        image: registry.cn-hangzhou.aliyuncs.com\/imges\/defaultbackend-amd64:1.5 \n        livenessProbe:\n          httpGet:\n            path: \/healthz\n            port: 8080\n            scheme: HTTP\n          initialDelaySeconds: 30\n          timeoutSeconds: 5\n        ports:\n        - containerPort: 8080\n        resources:\n          limits:\n            cpu: 10m\n            memory: 20Mi\n          requests:\n            cpu: 10m\n            memory: 20Mi\n---\napiVersion: v1\nkind: Service\nmetadata:\n  name: default-http-backend\n  namespace: kube-system\n  labels:\n    app.kubernetes.io\/name: default-http-backend\nspec:\n  ports:\n  - port: 80\n    targetPort: 8080\n  selector:\n    app.kubernetes.io\/name: default-http-backend\nEOF<\/pre>\n\n\n\n
\u90e8\u7f72\uff1a<\/p>\n\n\n\n
kubectl apply -f backend.yaml<\/pre>\n\n\n\n
\u67e5\u770b\u9ed8\u8ba4\u540e\u7aef\u8fd0\u884c\u60c5\u51b5\uff1a<\/p>\n\n\n\n
kubectl get pods -n kube-system<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u8bbf\u95eeingress-nginx-controller\u8282\u70b9\u6240\u5728\u7684node\u768480\u7aef\u53e3\uff0c\u770b\u662f\u5426\u6b63\u786e\u8fd4\u56debackend\u7684404\u63d0\u793a\u9875\u9762\uff1a<\/p>\n\n\n\n
curl 192.168.239.23<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
6\u3001\u6d4b\u8bd5<\/h2>\n\n\n\n
\u521b\u5efasvc\u548cpod<\/strong>\uff1a<\/p>\n\n\n\n
\u6211\u4eec\u4f7f\u7528\u9ed8\u8ba4\u7684nginx\u955c\u50cf\u521b\u5efasvc\u548cpod\uff0c\u7528\u4e8e\u6d4b\u8bd5\uff1a<\/p>\n\n\n\n
vim ingress-dev.yaml<\/pre>\n\n\n\n
apiVersion: apps\/v1\nkind: Deployment\nmetadata:\n  name: nginx-dm\n  namespace: default\nspec:\n  replicas: 2\n  selector:\n    matchLabels:\n      name: nginx\n  template:\n    metadata:\n      labels:\n        name: nginx\n    spec:\n      containers:\n      - name: nginx\n        image: nginx:1.16\n        imagePullPolicy: IfNotPresent\n        ports:\n        - containerPort: 80\n---\napiVersion: v1\nkind: Service\nmetadata:\n  name: nginx-svc\n  namespace: default\nspec:\n  ports:\n  - port: 80\n    targetPort: 80\n    protocol: TCP\n  selector:\n    name: nginx\n<\/pre>\n\n\n\n
kubectl apply -f ingress-dev.yaml<\/pre>\n\n\n\n
kubectl get pod -n default -o wide<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u67e5\u770b\u5bf9\u5e94\u7684ClusterIP\uff1a<\/p>\n\n\n\n
kubectl get pods,svc -o wide<\/pre>\n\n\n\n
\"\"<\/a>
\u6d4b\u8bd5\u8bbf\u95ee\u8be5IP\u5730\u5740\uff1a<\/figcaption><\/figure>\n\n\n\n
curl 192.168.163.56<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u914d\u7f6eingress<\/strong>\uff1a<\/p>\n\n\n\n
vim ingress.yaml<\/pre>\n\n\n\n
apiVersion: networking.k8s.io\/v1\nkind: Ingress\nmetadata:\n  name: nginx-test\n  namespace: default\n  annotations:\n    kubernetes.io\/ingress.class: \"nginx\"\nspec:\n  rules:\n  - host: test.sway.com.cn\n    http:\n      paths:\n      - path: \/\n        pathType: Prefix    # \u524d\u7f00\u5339\u914d\n        backend:\n          service:\n            name: nginx-svc\n            port:\n              number: 80<\/pre>\n\n\n\n
kubectl get ingress -n default<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u6d4b\u8bd5\u670d\u52a1\u7684\u53ef\u8bbf\u95ee\u60c5\u51b5\uff1a<\/p>\n\n\n\n
curl test.sway.com.cn<\/pre>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u81f3\u6b64\uff0c\u6240\u6709\u914d\u7f6e\u5b8c\u6210\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u672c\u4eba\u8f6c\u8f7d\u5e76\u4fee\u6539\u4e8e\u539f\u6587\u300aingress-nginx\u8be6\u89e3\u548c\u90e8\u7f72\u65b9\u6848\u300b\uff0c\u51fa\u5904\uff1ahttp … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1429","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/1429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1429"}],"version-history":[{"count":11,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/1429\/revisions"}],"predecessor-version":[{"id":1461,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/1429\/revisions\/1461"}],"wp:attachment":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1429"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}