纵使杯中|
收藏闪存小组博问

little小新

园龄：2年6个月粉丝：8关注：0

📂Kubernetes-K8s
🔖k8s
2024-07-01 00:16阅读: 206评论: 0推荐: 0

36、k8s-Ingress的使用-搭建ingress-nginx服务和ingress-controller控制器--http代理

1、搭建ingress服务环境（安装ingress-controller控制器）--这里使用nginx做负载均衡

1、创建文件：
    ·mkdir /opt/ingress
    ·cd /opt/ingress
2、获取ingress-nginx和ingress控制器的yaml文件：
    ##创建ingress-controller控制器的yaml文件
    ·wget https://github.com/kubernetes/ingress-nginx/blob/nginx-0.30.0/deploy/static/mandatory.yaml        
    ##创建 ingress-nginx服务的yaml文件
    ·wget https://github.com/kubernetes/ingress-nginx/blob/nginx-0.30.0/deploy/static/provider/baremetal/service-nodeport.yaml 
3、去到ingress目录下修改镜像仓库地址：
    ·vim /opt/ingress/mandatory.yaml
    ------------------------------------------------------------------------------------
    搜/image
    #将：image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0
    #改为国内仓库：image: quay-mirror.qiniu.com/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0
    
    #@如果国内镜像不行直接用国外镜像下载
    #@注意使用    kubectl describe pods -n ingress-nginx  查看pod的下载启动情况
    #@更换镜像后、先把yaml创建的pod和service删除：kubectl delete -f ./
    #@再创建
    ------------------------------------------------------------------------------------------------------------------
4、执行yaml文件：
    ·cd /opt/ingress
    ·kubectl apply -f ./
5、查看pod状态：
    ·kubectl get pods -n ingress-nginx
    ----------------------------------------------------------------------------------------
    NAME                                        READY   STATUS    RESTARTS   AGE
    nginx-ingress-controller-7f74f657bd-97jbm   1/1     Running   0          12m
    
    #只有READY  是1/1时pod才是正常运行状态
    -----------------------------------------------------------------------------------------
6、查看service状态：    #重点是这个服务（起到外部访问内部集群的作用、外部访问内部的集群通过这个ingress-nginx服务的端口来访问的）
    ·kubectl get service -n ingress-nginx
    -----------------------------------------------------------------------------------------------
    NAME            TYPE       CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
    ingress-nginx   NodePort   10.97.145.253   <none>        80:30090/TCP,443:32457/TCP   13m
    
    #这里service的类型是NodePort的
    #80是http的端口
    #443是https的端口
    ------------------------------------------------------------------------------------------------

2、准备service和pod

·创建如下图架构

 

2、创建tomcat-nginx.yaml

1、创建dev空间：kubectl create ns dev
2、vim tomcat-nginx.yaml
---------------------------------------------------------------
#创建两个deployment控制器和6个pod、两个service
 
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nginx-deployment
  namespace: dev
 
spec:
  replicas: 3
  selector:
    matchLabels:
      app: nginx-pod
  template:
    metadata:
      labels:
        app: nginx-pod
    spec:
      containers:
      - name: nginx
        image: nginx:1.17.1
        ports:
        - containerPort: 80
 
---
 
apiVersion: apps/v1
kind: Deployment
metadata:
  name: tomcat-deployment
  namespace: dev
 
spec:
  replicas: 3
  selector:
    matchLabels:
      app: tomcat-pod
  template:
    metadata:
      labels:
        app: tomcat-pod
    spec:
      containers:
      - name: tomcat
        image: tomcat:8.5-jre10-slim
        ports:
        - containerPort: 8080
 
---
 
apiVersion: v1
kind: Service
metadata:
  name: nginx-service
  namespace: dev
 
spec:
  selector:
    app: nginx-pod
  clusterIP: None
  type: ClusterIP　　
  ports:
  - port: 80
    targetPort: 80
 
---
 
apiVersion: v1
kind: Service
metadata:
  name: tomcat-service
  namespace: dev
 
spec:
  selector:
    app: tomcat-pod
  clusterIP: None　　
  type: ClusterIP　　　　#集群内部访问的service类型
  ports:
  - port: 8080
    targetPort: 8080
 
-------------------------------------------------------------------------------------
 
3、创建deploy、pod、service：kubectl apply -f tomcat-nginx.yaml
4、查询service、pod、deploy的状态：
    ·kubectl get deployment,pods,svc -ndev -owide
    ------------------------------------------------------------------------------------------------
    NAME                                READY   UP-TO-DATE   AVAILABLE   AGE     CONTAINERS   IMAGES                  SELECTOR
    deployment.apps/nginx-deployment    3/3     3            3           2m24s   nginx        nginx:1.17.1            app=nginx-pod
    deployment.apps/tomcat-deployment   3/3     3            3           2m24s   tomcat       tomcat:8.5-jre10-slim   app=tomcat-pod
 
    NAME                                     READY   STATUS    RESTARTS   AGE     IP            NODE     NOMINATED NODE   READINESS GATES
    pod/nginx-deployment-6696798b78-g489b    1/1     Running   0          2m24s   10.244.1.7    node-1   <none>           <none>
    pod/nginx-deployment-6696798b78-m2b9r    1/1     Running   0          2m24s   10.244.1.10   node-1   <none>           <none>
    pod/nginx-deployment-6696798b78-wx2r2    1/1     Running   0          2m24s   10.244.1.8    node-1   <none>           <none>
    pod/tomcat-deployment-58467d5474-d7cn5   1/1     Running   0          2m24s   10.244.1.9    node-1   <none>           <none>
    pod/tomcat-deployment-58467d5474-kwhrf   1/1     Running   0          2m24s   10.244.1.5    node-1   <none>           <none>
    pod/tomcat-deployment-58467d5474-lhbcj   1/1     Running   0          2m24s   10.244.1.6    node-1   <none>           <none>
 
    NAME                     TYPE        CLUSTER-IP   EXTERNAL-IP   PORT(S)    AGE     SELECTOR
    service/nginx-service    ClusterIP   None         <none>        80/TCP     2m24s   app=nginx-pod
    service/tomcat-service   ClusterIP   None         <none>        8080/TCP   2m24s   app=tomcat-pod
    -----------------------------------------------------------------------------------------------------------------------------------------------------

 

3、http代理（也就是ingress规则、配置规则才能使外部访问集群内部的应用）

1、创建ingress-http.yaml文件：vim ingress-http.yaml
-----------------------------------------------------------------------------------------------
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-http
  namespace: dev
 
spec:
  rules:
  - host: nginx.xiaoxin.com        #自定义域名（正式环境需要正确备案的域名）
    http:
      paths:
      - path: /                         #这个路径如果是 /test 那么访问的时候就加上 http://nginx.xiaoxin.com/test
        backend:                        #转发配置、转发到下面配置的服务
          serviceName: nginx-service    #这个就是上面创建的service、当访问http://nginx.xiaoxin.com/时 就会转发到这个service上
          servicePort: 80
  - host: tomcat.xiaoxin.com
    http:
      paths:
      - path: /
        backend:
          serviceName: tomcat-service
          servicePort: 8080
------------------------------------------------------------------------------------------------------------------------------
2、创建Ingress：kubectl create -f ingress-http.yaml
3、查看ingress状态：
    ·kubectl get ing ingress-http -ndev        #ing是ingress的缩写
    ------------------------------------------------------------------------------------
    NAME           HOSTS                                  ADDRESS         PORTS   AGE
    ingress-http   nginx.xiaoxin.com,tomcat.xiaoxin.com   10.97.145.253   80      73s
    
    #hosts  是域名        
    #posts  是http暴露的端口
    ----------------------------------------------------------------------------------------
4、查看ingress更详细的信息：
    ·kubectl describe ing ingress-http -ndev
    --------------------------------------------------------------------------------------------
    Name:             ingress-http
    Namespace:        dev
    Address:          10.97.145.253
    Default backend:  default-http-backend:80 (<none>)
    Rules:
      Host                Path  Backends
      ----                ----  --------
      nginx.xiaoxin.com                        #看这里即可  意思是 访问nginx.xiaoxin.com + /  就转发到nginx-service:80 (10.244.1.10:80,10.244.1.7:80,10.244.1.8:80) 这三个pod去处理
                          /   nginx-service:80 (10.244.1.10:80,10.244.1.7:80,10.244.1.8:80)
      tomcat.xiaoxin.com
                          /   tomcat-service:8080 (10.244.1.5:8080,10.244.1.6:8080,10.244.1.9:8080)
    Annotations:
    Events:
      Type    Reason  Age    From                      Message
      ----    ------  ----   ----                      -------
      Normal  CREATE  3m58s  nginx-ingress-controller  Ingress dev/ingress-http
      Normal  UPDATE  3m19s  nginx-ingress-controller  Ingress dev/ingress-http
    ----------------------------------------------------------------------------------------------------------------------------
    
 5、测式：
     ·先在本机的hosts文件做域名解析：
         ··路径：C:\Windows\System32\drivers\etc\hosts
         ··添加域名 192.168.177.160 nginx.xiaoxin.com  
         ··添加域名 192.168.177.160 tomcat.xiaoxin.com
     ·查看第一步安装的ingress-nginx服务给的端口号：
         ··kubectl get svc -n ingress-nginx
          -------------------------------------------------------------------------------------------------
          NAME            TYPE       CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
          ingress-nginx   NodePort   10.97.145.253   <none>        80:30090/TCP,443:32457/TCP   134m
          
          #这里PORT 80指http协议 30090就是ingress暴露给外界访问的端口号
          ---------------------------------------------------------------------------------------------------
     ·浏览器访问：
         ··http://nginx.xiaoxin.com:30090
         ··http://tomcat.xiaoxin.com:30090

本文作者：little小新

本文链接：https://www.cnblogs.com/littlecc/p/17683499.html

版权声明：本作品采用知识共享署名-非商业性使用-禁止演绎 2.5 中国大陆许可协议进行许可。

posted @   little小新  阅读(206)  评论(0)  编辑  收藏  举报
点击右上角即可分享
微信分享提示
评论
收藏
关注
推荐
深色
回顶
收起