k8s之ingress

https 自动管理 TLS证书

• helm 安装 cert-manager

• 配置ClusterIssuer

• Securing Ingress Resources

webosocket支持

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: cafe-ingress
  annotations:
    nginx.org/websocket-services: "ws-svc"
spec:
  rules:
  - host: cafe.example.com
    http:
      paths:
      - path: /ws
        backend:
          serviceName: ws-svc
          servicePort: 8008

粘性会话

    # annotations
    nginx.ingress.kubernetes.io/affinity: cookie
    nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
    nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
    nginx.ingress.kubernetes.io/session-cookie-name: route

custom nginx configmap

对于需要改nginx配置需求的， 比如常见的文件上传大小限制

apiVersion: v1
kind: ConfigMap
metadata:
  name: nginx-configuration
  namespace: kube-system
  labels: 
    app: ingress-nginx
data:
  proxy-buffer-size: 16k
  proxy-buffers: 8 16k
  # maximum allowed size of the client request body
  proxy-body-size: 50m

warning: name和namespace可能需要更改，通过describe pod ingress-nginx返回—configmap= 查看

ingress config boilerplate template

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: test-ingress
  namespace: test
  annotations:
    kubernetes.io/ingress.class: nginx
    # add an annotation indicating the issuer to use.
    cert-manager.io/cluster-issuer: letsencrypt-prod
    # websocket services required
    nginx.org/websocket-services: "ws-svc"
    # 粘性会话
    nginx.ingress.kubernetes.io/affinity: cookie
    nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
    nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
    nginx.ingress.kubernetes.io/session-cookie-name: route
spec:
  tls:
  - hosts:
    - test.example.com
    secretName: letsencrypt-prod
  rules:
    - host: test.example.com
      http:
        paths:
        - path: /
          backend:
            serviceName: svc-test
            servicePort: 80

怎么在新的namespace 里面新建ingress

参考测试环境的ingress配置, 修改name, namespace, 根据域名需要修改对应的域名， 一定要注意,ingress, deploy, service必须在同一命名空间中

怎么在已有ingress的namespace 里面新建ingress

新建的ingress name 不能和已有的ingress name 重合，否则会被覆盖掉

瓦雀