当前位置：网站首页>Kubernetes基础自学系列 | Ingress API讲解

Kubernetes基础自学系列 | Ingress API讲解

2022-06-27 15:45:00 【51CTO】

视频来源：B站《2021 年末倾力打造 Kubernetes 入门至精通 - 2022 年幸福的开胃菜》

一边学习一边整理老师的课程内容及试验笔记，并与大家分享，侵权即删，谢谢支持！

资料信息

Ingress-Nginx github 地址：
https://github.com/kubernetes/ingress-nginx

Ingress-Nginx 官方网站：
https://kubernetes.github.io/ingress-nginx/

Kubernetes基础自学系列 | Ingress API讲解_github

部署 Ingress-Nginx

      
      
       
       $ kubectl  apply -f mandatory.yaml
       
       
$ kubectl  apply -f service-nodeport.yaml
      
      
      
      
       
       1.
       
       2.

Ingress HTTP 代理访问

deployment、Service、Ingress Yaml 文件

      
      
       
       apiVersion: extensions/v1beta1
       
       
kind: Deployment
       
       
metadata:
       
       
  name: nginx-dm
       
       
spec:
       
       
  replicas: 2
       
       
  template:
       
       
    metadata:
       
       
      labels:
       
       
        name: nginx
       
       
    spec:
       
       
      containers:
       
       
        - name: nginx
       
       
          image: wangyanglinux/myapp:v1
       
       
          imagePullPolicy: IfNotPresent
       
       
          ports:
       
       
            - containerPort: 80
       
       
---
       
       
apiVersion: v1
       
       
kind: Service
       
       
metadata:
       
       
  name: nginx-svc
       
       
spec:
       
       
  ports:
       
       
    - port: 80
       
       
      targetPort: 80
       
       
      protocol: TCP
       
       
  selector:
       
       
    name: nginx
       
       
---
       
       
apiVersion: extensions/v1beta1
       
       
kind: Ingress
       
       
metadata:
       
       
  name: nginx-test
       
       
spec:
       
       
  rules:
       
       
    - host: www1.hongfu.com
       
       
      http:
       
       
        paths:
       
       
        - path: /
       
       
          backend:
       
       
            serviceName: nginx-svc
       
       
            servicePort: 80
      
      
      
      
       
       1.
       
       2.
       
       3.
       
       4.
       
       5.
       
       6.
       
       7.
       
       8.
       
       9.
       
       10.
       
       11.
       
       12.
       
       13.
       
       14.
       
       15.
       
       16.
       
       17.
       
       18.
       
       19.
       
       20.
       
       21.
       
       22.
       
       23.
       
       24.
       
       25.
       
       26.
       
       27.
       
       28.
       
       29.
       
       30.
       
       31.
       
       32.
       
       33.
       
       34.
       
       35.
       
       36.
       
       37.
       
       38.
       
       39.
       
       40.
       
       41.
       
       42.
       
       43.

Ingress HTTPS 代理访问

创建证书，以及 cert 存储方式

      
      
       
       openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=nginxsvc/O=nginxsvc"
       
       
kubectl create secret tls tls-secret --key tls.key --cert tls.crt
      
      
      
      
       
       1.
       
       2.

deployment、Service、Ingress Yaml 文件

      
      
       
       apiVersion: extensions/v1beta1
       
       
kind: Ingress
       
       
metadata:
       
       
  name: nginx-test
       
       
spec:
       
       
  tls:
       
       
    - hosts:
       
       
      - ssl.hongfu.com
       
       
      secretName: tls-secret
       
       
  rules:
       
       
    - host: ssl.hongfu.com
       
       
      http:
       
       
        paths:
       
       
        - path: /
       
       
          backend:
       
       
            serviceName: nginx-svc
       
       
            servicePort: 80
      
      
      
      
       
       1.
       
       2.
       
       3.
       
       4.
       
       5.
       
       6.
       
       7.
       
       8.
       
       9.
       
       10.
       
       11.
       
       12.
       
       13.
       
       14.
       
       15.
       
       16.
       
       17.

Nginx 进行 BasicAuth

      
      
       
       yum -y install httpd
       
       
htpasswd -c auth foo
       
       
kubectl create secret generic basic-auth --from-file=auth
      
      
      
      
       
       1.
       
       2.
       
       3.

      
      
       
       apiVersion: extensions/v1beta1
       
       
kind: Ingress
       
       
metadata:
       
       
  name: auth.hongfu.com
       
       
  annotations:
       
       
    nginx.ingress.kubernetes.io/auth-type: basic
       
       
    nginx.ingress.kubernetes.io/auth-secret: basic-auth
       
       
    nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - foo'
       
       
spec:
       
       
  rules:
       
       
  - host: auth.hongfu.com
       
       
    http:
       
       
      paths:
       
       
      - path: /
       
       
        backend:
       
       
          serviceName: nginx-svc
       
       
          servicePort: 80
      
      
      
      
       
       1.
       
       2.
       
       3.
       
       4.
       
       5.
       
       6.
       
       7.
       
       8.
       
       9.
       
       10.
       
       11.
       
       12.
       
       13.
       
       14.
       
       15.
       
       16.
       
       17.

Nginx 进行重写

名称	描述	值
nginx.ingress.kubernetes.io/rewrite-target	必须重定向流量的目标URI	串
nginx.ingress.kubernetes.io/ssl-redirect	指示位置部分是否仅可访问SSL（当Ingress包含证书时默认为True）	布尔
nginx.ingress.kubernetes.io/force-ssl-redirect	即使Ingress未启用TLS，也强制重定向到HTTPS	布尔
nginx.ingress.kubernetes.io/app-root	定义Controller必须重定向的应用程序根，如果它在'/'上下文中	串
nginx.ingress.kubernetes.io/use-regex	指示Ingress上定义的路径是否使用正则表达式	布尔

      
      
       
       apiVersion: extensions/v1beta1
       
       
kind: Ingress
       
       
metadata:
       
       
  name: rew.hongfu.com
       
       
  annotations:
       
       
    nginx.ingress.kubernetes.io/rewrite-target: https://www.baidu.com
       
       
spec:
       
       
  rules:
       
       
  - host: rew.hongfu.com
       
       
    http:
       
       
      paths:
       
       
      - path: /
       
       
        backend:
       
       
          serviceName: nginx-svc
       
       
          servicePort: 80
      
      
      
      
       
       1.
       
       2.
       
       3.
       
       4.
       
       5.
       
       6.
       
       7.
       
       8.
       
       9.
       
       10.
       
       11.
       
       12.
       
       13.
       
       14.
       
       15.