12、Kubernetes Ingress

妖狐艹你老母 2023-07-11 12:35 3阅读 0赞

# 资料信息 #

###### Ingress-Nginx github 地址：[https://github.com/kubernetes/ingress-nginx][https_github.com_kubernetes_ingress-nginx] ######

###### Ingress-Nginx 官方网站：[https://github.com/kubernetes/ingress-nginx/blob/master/docs/deploy/index.md][https_github.com_kubernetes_ingress-nginx_blob_master_docs_deploy_index.md] ######

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70]  
[https://quay.io/repository/kubernetes-ingress-controller/nginx-ingress-controller?tag=0.30.0&tab=tags][https_quay.io_repository_kubernetes-ingress-controller_nginx-ingress-controller_tag_0.30.0_tab_tags]

docker pull quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 1]

# Ingress HTTP 代理访问 #

###### deployment、Service、Ingress Yaml 文件 ######

apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: deployment1
      namespace: default
    spec:
      replicas: 3
      selector:
        matchLabels:
          app: myapp
          release: stabel
      template:
        metadata:
          labels:
            app: myapp
            release: stabel
        spec:
          containers:
          - name: myapp
            image: wangyanglinux/myapp:v1
            imagePullPolicy: IfNotPresent
            ports:
            - name: http
              containerPort: 80

apiVersion: v1
    kind: Service
    metadata:
      name: sv1
      namespace: default
    spec:
      type: ClusterIP
      selector:
        app: myapp
        release: stabel
      ports:
      - name: http
        port: 80
        targetPort: 80

apiVersion: apps/v1
    kind: Ingress
    metadata:
      name: nginx-test
    spec:
      rules:
      - host: www1.atguigu.com
        http:
          paths:
          - path: /
            backend:
              serviceName: nginx-svc
              servicePort: 80

# Ingress HTTPS 代理访问 #

###### 创建证书，以及 cert 存储方式 ######

openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=nginxsvc/O=nginxsvc" kubectl create secret tls tls-secret --key tls.key --cert tls.crt

###### deployment、Service、Ingress Yaml 文件 ######

apiVersion: apps/v1
    kind: Ingress
    metadata:
      name: nginx-test
    spec:
      tls:
      - hosts:
        - foo.bar.com
        secretName: tls-secret
      rules:
      - host: foo.bar.com
        http:
          paths:
          - path: /
            backend:
              serviceName: nginx-svc
              servicePort: 80

# Nginx 进行 BasicAuth #

yum -y install httpd
    htpasswd -c auth foo
    kubectl create secret generic basic-auth --from-file=auth

apiVersion: apps/v1
    kind: Ingress
    metadata:
      name: ingress-with-auth
      annotations:
        nginx.ingress.kubernetes.io/auth-type: basic
        nginx.ingress.kubernetes.io/auth-secret: basic-auth
        nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - foo'
    spec:
      rules:
      - host: foo2.bar.com
        http:
          paths:
          - path: /
            backend:
              serviceName: nginx-svc
              servicePort: 80

# Nginx 进行重写 #

<table> 
 <thead> 
  <tr> 
   <th align="center">名称</th> 
   <th align="center">描述</th> 
   <th align="center">值</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td align="center">nginx.ingress.kubernetes.io/rewrite-target</td> 
   <td align="center">必须重定向流量的目标URI</td> 
   <td align="center">串</td> 
  </tr> 
  <tr> 
   <td align="center">nginx.ingress.kubernetes.io/ssl-redirect</td> 
   <td align="center">指示位置部分是否仅可访问SSL（当Ingress包含证书时默认为True）</td> 
   <td align="center">布尔</td> 
  </tr> 
  <tr> 
   <td align="center">nginx.ingress.kubernetes.io/force-ssl-redirect</td> 
   <td align="center">即使Ingress未启用TLS，也强制重定向到HTTPS</td> 
   <td align="center">布尔</td> 
  </tr> 
  <tr> 
   <td align="center">nginx.ingress.kubernetes.io/app-root</td> 
   <td align="center">定义Controller必须重定向的应用程序根，如果它在’/'上下文中</td> 
   <td align="center">串</td> 
  </tr> 
  <tr> 
   <td align="center">nginx.ingress.kubernetes.io/use-regex</td> 
   <td align="center">指示Ingress上定义的路径是否使用正则表达式</td> 
   <td align="center">布尔</td> 
  </tr> 
 </tbody> 
</table>

apiVersion: apps/v1
    kind: Ingress
    metadata:
      name: nginx-test
      annotations:
        nginx.ingress.kubernetes.io/rewrite-target: http://foo.bar.com:31795/hostname.html
    spec:
      rules:
      - host: foo10.bar.com
        http:
          paths:
          - path: /
            backend:
              serviceName: nginx-svc
              servicePort: 80

[https_github.com_kubernetes_ingress-nginx]: https://github.com/kubernetes/ingress-nginx
[https_github.com_kubernetes_ingress-nginx_blob_master_docs_deploy_index.md]: https://github.com/kubernetes/ingress-nginx/blob/master/docs/deploy/index.md
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200306081844715.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI=,size_16,color_FFFFFF,t_70
[https_quay.io_repository_kubernetes-ingress-controller_nginx-ingress-controller_tag_0.30.0_tab_tags]: https://quay.io/repository/kubernetes-ingress-controller/nginx-ingress-controller?tag=0.30.0&tab=tags
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200305161430546.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3d0bDE5OTI=,size_16,color_FFFFFF,t_70