• K8S集群实现外部访问（INGRESS）

    环境：

    masternode01node02
    192.168.1.40192.168.1.41192.168.1.42

    INGRESS

    作用：Ingress 是对集群中服务的外部访问进行管理的 API 对象。

    1.创建DEPLOYMENT

    PS：创建nginx和httpd

    1. [root@master yaml]# vim nginx.yaml
    2.  
    3. kind: Deployment
    4. apiVersion: extensions/v1beta1
    5. metadata:
    6.   name: nginx
    7. spec:
    8.   replicas: 3
    9.   template:
    10.     metadata:
    11.       labels:
    12.         app:  nginx
    13.     spec:
    14.       containers:
    15.       - name: nginx
    16.         image:  nginx
    17. ---
    18. kind: Service
    19. apiVersion: v1
    20. metadata:
    21.   name: nginx-svc
    22. spec: 
    23.   selector:
    24.     app:  nginx
    25.   ports:
    26.   - protocol: TCP
    27.     port: 80
    28.     targetPort: 80
    29.     
    30. [root@master yaml]# kubectl  apply  -f  nginx.yaml 
    31. deployment.extensions/nginx created
    32. service/nginx-svc created
    33.  
    34. [root@master yaml]# vim httpd.yaml
    35.  
    36. kind: Deployment
    37. apiVersion: extensions/v1beta1
    38. metadata:
    39.   name: httpd
    40. spec:
    41.   replicas: 3
    42.   template:
    43.     metadata:
    44.       labels:
    45.         app:  httpd
    46.     spec:
    47.       containers:
    48.       - name: httpd
    49.         image:  httpd
    50. ---
    51. kind: Service
    52. apiVersion: v1
    53. metadata:
    54.   name: httpd-svc
    55. spec: 
    56.   selector:
    57.     app:  httpd
    58.   ports:
    59.   - protocol: TCP
    60.     port: 80
    61.     targetPort: 80
    62.  
    63. [root@master yaml]# kubectl  apply  -f  httpd.yaml  
    64. deployment.extensions/httpd created
    65. service/httpd-svc created
    66. [root@master yaml]# kubectl  get deployments.
    67. NAME    READY   UP-TO-DATE   AVAILABLE   AGE
    68. httpd   3/3     3            3           117s
    69. nginx   3/3     3            3           3m10s
    70. [root@master yaml]# kubectl  get svc
    71. NAME         TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)   AGE
    72. httpd-svc    ClusterIP   10.97.134.80           80/TCP    2m1s
    73. nginx-svc    ClusterIP   10.96.37.85            80/TCP    3m14s

    2.部署INGRESS

    2.1 下载INGRESS文件

    [root@master yaml]# wget https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.35.0/deploy/static/provider/baremetal/deploy.yaml

    2.2 修改YAML文件

    1. [root@master yaml]# vim deploy.yaml
    2. ......
    3. spec:
    4.       hostNetwork:  true   #本地网络访问
    5.       dnsPolicy: ClusterFirst
    6.       containers:
    7.         - name: controller
    8.           image: registry.aliyuncs.com/google_containers/nginx-ingress-controller:0.30.0
    9.           imagePullPolicy: IfNotPresent
    10. ......
    11. [root@master yaml]# kubectl  apply  -f  deploy.yaml

    2.3 查看

    PS：namespace为ingress-nginx

    1. [root@master yaml]# kubectl get pod -o wide -n ingress-nginx 
    2. NAME                                        READY   STATUS      RESTARTS   AGE     IP             NODE     NOMINATED NODE   READINESS GATES
    3. ingress-nginx-admission-create-qqjz2        0/1     Completed   0          3m30s   10.244.1.9     node02   <none>           <none>
    4. ingress-nginx-admission-patch-7xkk8         0/1     Completed   0          3m30s   10.244.2.7     node01   <none>           <none>
    5. ingress-nginx-controller-6584bf6bc8-hj9zk   1/1     Running     0          3m30s   192.168.1.41   node01   <none>           <none>
    6.  
    7. [root@master yaml]# kubectl get svc -n ingress-nginx
    8. NAME                                 TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
    9. ingress-nginx-controller             NodePort    10.97.134.37    <none>        80:31126/TCP,443:31537/TCP   3m23s
    10. ingress-nginx-controller-admission   ClusterIP   10.96.170.183   <none>        443/TCP                      3m23s

    2.4 查看INGRESS-NGINX-CONTROLLER容器内部详情

    PS：它现在已经有一个模板，用来描述Ingress资源能够收集到的信息了

    1. [root@master yaml]# kubectl  exec  -it -n ingress-nginx ingress-nginx-controller-6584bf6bc8-hj9zk sh
    2. /etc/nginx $ cat nginx.conf
    3. ......
    4. location / {
    5. 			
    6. 			set $namespace      "";
    7. 			set $ingress_name   "";
    8. 			set $service_name   "";
    9. 			set $service_port   "";
    10. 			set $location_path  "/";
    11. ......

    3.基于HTTPD的访问

    3.1 创建对应的INGRESS规则

    1. [root@master yaml]# vim ingress-httpd.yaml
    2.  
    3. kind: Ingress
    4. apiVersion: extensions/v1beta1
    5. metadata:
    6.   name:  web-ingress
    7.   annotations:
    8.     nginx.ingress.kubernetes.io/rewrite-target: /
    9. spec:
    10.   rules:
    11.   - host: wwww.ingress.com
    12.     http:
    13.       paths:
    14.       - path: /nginx
    15.         backend:
    16.           serviceName:  nginx-svc
    17.           servicePort:  80
    18.       - path: /httpd
    19.         backend:
    20.           serviceName:  httpd-svc
    21.           servicePort:  80
    22.  
    23. [root@master yaml]# kubectl  apply  -f  ingress-httpd.yaml 
    24. ingress.extensions/web-ingress created
    25.

    3.2 查看对应规则的详细信息

    1. [root@master yaml]#  kubectl  describe  ingresses. web-ingress
    2. Name:             web-ingress
    3. Namespace:        default
    4. Address:          192.168.1.41
    5. Default backend:  default-http-backend:80 (<none>)
    6. Rules:
    7.   Host             Path  Backends
    8.   ----             ----  --------
    9.   web.ingress.com  
    10.                    /nginx   nginx-svc:80 (10.244.1.2:80,10.244.2.2:80,10.244.2.3:80)
    11.                    /httpd   httpd-svc:80 (10.244.1.3:80,10.244.1.4:80,10.244.2.4:80)
    12. Annotations:
    13.   kubectl.kubernetes.io/last-applied-configuration:  {"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"annotations":{"nginx.ingress.kubernetes.io/rewrite-target":"/"},"name":"web-ingress","namespace":"default"},"spec":{"rules":[{"host":"web.ingress.com","http":{"paths":[{"backend":{"serviceName":"nginx-svc","servicePort":80},"path":"/nginx"},{"backend":{"serviceName":"httpd-svc","servicePort":80},"path":"/httpd"}]}}]}}
    14.  
    15.   nginx.ingress.kubernetes.io/rewrite-target:  /
    16. Events:
    17.   Type    Reason  Age   From                      Message
    18.   ----    ------  ----  ----                      -------
    19.   Normal  CREATE  50s   nginx-ingress-controller  Ingress default/web-ingress
    20.   Normal  UPDATE  3s    nginx-ingress-controller  Ingress default/web-ingress
    21.

    3.3 查看INGRESS-NGINX-CONTROLLER容器内部详情

    1. [root@master yaml]# kubectl  exec  -it -n ingress-nginx ingress-nginx-controller-6584bf6bc8-hj9zk sh
    2. /etc/nginx $ cat nginx.conf
    3. ......
    4. 	location ~* "^/nginx" {
    5. 			
    6. 			set $namespace      "default";
    7. 			set $ingress_name   "web-ingress";
    8. 			set $service_name   "nginx-svc";
    9. 			set $service_port   "80";
    10. 			set $location_path  "/nginx";
    11. ......
    12. 	location ~* "^/httpd" {
    13. 			
    14. 			set $namespace      "default";
    15. 			set $ingress_name   "web-ingress";
    16. 			set $service_name   "httpd-svc";
    17. 			set $service_port   "80";
    18. 			set $location_path  "/httpd";
    19. ......

    3.4 访问

    PS：有DNS的话可以设置解析，没有的话必须在host文件下添加域名解析才可访问

    winows：C:\Windows\System32\drivers\etc\

    linux：/etc/hosts

    1. [root@client ~]# vim /etc/hosts
    2. 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
    3. ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
    4. 192.168.1.41 wwww.ingress.com

    4.基于HTTP实现虚拟机主机的访问

    4.1 创建INGRESS规则

    1. [root@master yaml]# vim ingress.yaml 
    2.  
    3. kind: Ingress
    4. apiVersion: extensions/v1beta1
    5. metadata:
    6.   name: ingress1
    7.   annotations:
    8.     nginx.ingress.kubernetes.io/rewrite-target: /
    9. spec:
    10.   rules:
    11.   - host: ingress1.web.io
    12.     http:
    13.       paths:
    14.       - path: /nginx
    15.         backend:
    16.           serviceName: nginx-svc
    17.           servicePort: 80
    18. ---
    19. kind: Ingress
    20. apiVersion: extensions/v1beta1
    21. metadata:
    22.   name: ingress2
    23.   annotations:
    24.     nginx.ingress.kubernetes.io/rewrite-target: /
    25. spec:
    26.   rules:
    27.   - host: ingress2.web.io
    28.     http:
    29.       paths:
    30.       - path: /httpd
    31.         backend:
    32.           serviceName: httpd-svc
    33.           servicePort: 80
    34.  
    35. [root@master yaml]# kubectl  apply  -f  ingress.yaml 
    36. ingress.extensions/ingress1 created
    37. ingress.extensions/ingress2 created

    4.2 查看对应的INGRESS规则

    1. [root@master yaml]# kubectl  describe  ingresses. ingress1 
    2. Name:             ingress1
    3. Namespace:        default
    4. Address:          192.168.1.41
    5. Default backend:  default-http-backend:80 (<none>)
    6. Rules:
    7.   Host             Path  Backends
    8.   ----             ----  --------
    9.   ingress1.web.io  
    10.                    /nginx   nginx-svc:80 (10.244.1.2:80,10.244.2.2:80,10.244.2.3:80)
    11. Annotations:
    12.   kubectl.kubernetes.io/last-applied-configuration:  {"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"annotations":{"nginx.ingress.kubernetes.io/rewrite-target":"/"},"name":"ingress1","namespace":"default"},"spec":{"rules":[{"host":"ingress1.web.io","http":{"paths":[{"backend":{"serviceName":"nginx-svc","servicePort":80},"path":"/nginx"}]}}]}}
    13.  
    14.   nginx.ingress.kubernetes.io/rewrite-target:  /
    15. Events:
    16.   Type    Reason  Age   From                      Message
    17.   ----    ------  ----  ----                      -------
    18.   Normal  CREATE  71s   nginx-ingress-controller  Ingress default/ingress1
    19.   Normal  UPDATE  39s   nginx-ingress-controller  Ingress default/ingress1
    20. [root@master yaml]# kubectl  describe  ingresses. ingress2
    21. Name:             ingress2
    22. Namespace:        default
    23. Address:          192.168.1.41
    24. Default backend:  default-http-backend:80 (<none>)
    25. Rules:
    26.   Host             Path  Backends
    27.   ----             ----  --------
    28.   ingress2.web.io  
    29.                    /httpd   httpd-svc:80 (10.244.1.3:80,10.244.1.4:80,10.244.2.4:80)
    30. Annotations:
    31.   kubectl.kubernetes.io/last-applied-configuration:  {"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"annotations":{"nginx.ingress.kubernetes.io/rewrite-target":"/"},"name":"ingress2","namespace":"default"},"spec":{"rules":[{"host":"ingress2.web.io","http":{"paths":[{"backend":{"serviceName":"httpd-svc","servicePort":80},"path":"/httpd"}]}}]}}
    32.  
    33.   nginx.ingress.kubernetes.io/rewrite-target:  /
    34. Events:
    35.   Type    Reason  Age   From                      Message
    36.   ----    ------  ----  ----                      -------
    37.   Normal  CREATE  73s   nginx-ingress-controller  Ingress default/ingress2
    38.   Normal  UPDATE  41s   nginx-ingress-controller  Ingress default/ingress2

    4.3 访问

    1. [root@node02 ~]# vim /etc/hosts
    2. 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
    3. ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
    4. 192.168.1.41 ingress1.web.io  ingress2.web.io

    5.基于HTTPS的访问

    5.1 创建证书

    1. [root@master yaml]# mkdir https
    2. [root@master yaml]# cd https/
    3. [root@master https]# openssl  req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=nginxsvc/O=nginxsvc"
    4. Generating a 2048 bit RSA private key
    5. .......................................+++
    6. .....................................................+++
    7. writing new private key to 'tls.key'
    8. -----
    9. [root@master https]# ls
    10. tls.crt  tls.key

    5.2 用SECRET创建资源，将证书保存到K8S集群中

    1. [root@master https]# kubectl  create  secret  tls tls-secret --key=tls.key --cert tls.crt 
    2. secret/tls-secret created

    5.3 创建DEPLOYMENT和对应INGRESS规则

    1. [root@master https]# vim deploy.yaml 
    2.  
    3. apiVersion: extensions/v1beta1
    4. kind: Deployment
    5. metadata:
    6.   name: httpds
    7. spec:
    8.   replicas: 2
    9.   template: 
    10.     metadata:
    11.       labels:
    12.         app:  httpd
    13.     spec:
    14.       containers:
    15.       - name: httpd
    16.         image:  httpd
    17. ---
    18. kind: Service
    19. apiVersion: v1
    20. metadata:
    21.   name: httpdsvc-1
    22. spec:
    23.   selector: 
    24.     app:  httpd
    25.   ports:
    26.   - protocol: TCP
    27.     port: 80
    28.     targetPort: 80 
    29. [root@master https]# kubectl  apply  -f  deploy.yaml 
    30. deployment.extensions/httpds created
    31. service/httpdsvc-1 created
    32. [root@master https]# vim ingress.yaml
    33.  
    34. kind: Ingress
    35. apiVersion: extensions/v1beta1
    36. metadata:
    37.   name: https
    38. spec:
    39.   tls:
    40.     - hosts:
    41.       - ingress.httpd.com
    42.       secretName: tls-secret
    43.   rules:
    44.   - host: ingress.httpd.com
    45.     http:
    46.       paths:
    47.       - path: /
    48.         backend:
    49.           serviceName: httpdsvc-1
    50.           servicePort: 80
    51.  
    52. [root@master https]# kubectl  apply  -f  ingress.yaml 
    53. ingress.extensions/https created

    5.4 访问

    1. [root@node02 ~]# vim /etc/hosts
    2. 127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
    3. ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
    4. 192.168.1.41 ingress1.web.io  ingress2.web.io  ingress.httpd.com

  • 相关阅读:
    基于spring boot开发的快递管理系统开题报告
    如何在PDF文件中提取图片？PDF图片提取教程
    AI 一键去背景
    Java实验（头歌） -Java继承和多态接口
    2199. Finding the Topic of Each Post
    spring注解使用习惯-Control层前后端交互
    2015年蓝桥杯省赛C/C++ A组 灾后重建题解（100分）
    洛谷P4061 大吉大利，晚上吃鸡
    oracle灾备切换和回切步骤以及sql执行语句
    Spring事件监听机制使用和原理解析
  • 原文地址：https://blog.csdn.net/zfw_666666/article/details/126287385