資料信息
Ingress-Nginx github 地址
Ingress-Nginx 官方網站
部署 Ingress-Nginx
<code>kubectl apply -f mandatory.yaml kubectl apply -f service-nodeport.yaml /<code>
Ingress HTTP 代理訪問
deployment、Service、Ingress Yaml 文件
<code>apiVersion: extensions/v1beta1 kind: Deployment metadata: name: nginx-dm spec: replicas: 2 template: metadata: labels: name: nginx spec: containers: - name: nginx image: wangyanglinux/myapp:v1 imagePullPolicy: IfNotPresent ports: - containerPort: 80 --- apiVersion: v1 kind: Service metadata: name: nginx-svc spec: ports: - port: 80 targetPort: 80 protocol: TCP selector: name: nginx --- apiVersion: extensions/v1beta1 kind: Ingress metadata: name: nginx-test spec: rules: - host: www1.atguigu.com http: paths: - path: / backend: serviceName: nginx-svc servicePort: 80 /<code>
Ingress HTTPS 代理訪問
創建證書,以及 cert 存儲方式
<code>openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=nginxsvc/O=nginxsvc" kubectl create secret tls tls-secret --key tls.key --cert tls.crt /<code>
deployment、Service、Ingress Yaml 文件
<code>apiVersion: extensions/v1beta1 kind: Ingress metadata: name: nginx-test spec: tls: - hosts: - foo.bar.com secretName: tls-secret rules: - host: foo.bar.com http: paths: - path: / backend: serviceName: nginx-svc servicePort: 80 /<code>
Nginx 進行 BasicAuth
<code>yum -y install httpd htpasswd -c auth foo kubectl create secret generic basic-auth --from-file=auth /<code>
<code>apiVersion: extensions/v1beta1 kind: Ingress metadata: name: ingress-with-auth annotations: nginx.ingress.kubernetes.io/auth-type: basic nginx.ingress.kubernetes.io/auth-secret: basic-auth nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required - foo' spec: rules: - host: foo2.bar.com http: paths: - path: / backend: serviceName: nginx-svc servicePort: 80 /<code>
Nginx 進行重寫
名稱描述值nginx.ingress.kubernetes.io/rewrite-target必須重定向流量的目標URI串nginx.ingress.kubernetes.io/ssl-redirect指示位置部分是否僅可訪問SSL(當Ingress包含證書時默認為True)布爾nginx.ingress.kubernetes.io/force-ssl-redirect即使Ingress未啟用TLS,也強制重定向到HTTPS布爾nginx.ingress.kubernetes.io/app-root定義Controller必須重定向的應用程序根,如果它在'/'上下文中串nginx.ingress.kubernetes.io/use-regex指示Ingress上定義的路徑是否使用正則表達式布爾
<code>apiVersion: extensions/v1beta1 kind: Ingress metadata: name: nginx-test annotations: nginx.ingress.kubernetes.io/rewrite-target: http://foo.bar.com:31795/hostname.html spec: rules: - host: foo10.bar.com http: paths: - path: / backend: serviceName: nginx-svc servicePort: 80/<code>
關鍵字: kubernetes metadata spec