LAB-07：创建Ingress
LAB 需求
在 ing-internal 命名空间下创建一个 ingress，名字为 pong，代理的 service hi，端口为 5678，配置路径 /hi。
验证：访问 curl -kL <INTERNAL_IP>/hi 会返回 hi
LAB 预配
# 1、创建 ns
# 创建一个名称为 ing-internal 命名空间
user1@k8s-master:~/cka/7$ cat ns-ing-internal.yaml
apiVersion: v1
kind: Namespace
metadata:
name: ing-internal
# 部署 ing-internal
user1@k8s-master:~/cka/7$ kubectl apply -f ns-ing-internal.yaml
namespace/ing-internal created
# 2、创建 ingress-controller，这里使用 ingress-nginx
# 下载 yaml 文件
user1@k8s-master:~/cka/7$ wget https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/baremetal/1.22/deploy.yaml
# 部署 ingress 控制器
user1@k8s-master:~/cka/7$ kubectl apply -f deploy.yaml
# 查看创建的 SVC
user1@k8s-master:~$ kubectl get svc -n ingress-nginx
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
ingress-nginx-controller NodePort 10.103.179.91 <none> 80:31116/TCP,443:30702/TCP 23h
ingress-nginx-controller-admission ClusterIP 10.104.125.187 <none> 443/TCP 23h
# 查看创建的 pod
user1@k8s-master:~$ kubectl get pod -n ingress-nginx -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
ingress-nginx-admission-patch--1-f9qth 0/1 Completed 0 23h <none> k8s-node-3 <none> <none>
ingress-nginx-controller-76cbb4c8b-kb8s8 1/1 Running 1 (8h ago) 23h 10.244.140.81 k8s-node-2 <none> <none>
# 查看 ingress-controller 的 endpoint。
user1@k8s-master:~$ kubectl get endpoints -n ingress-nginx
NAME ENDPOINTS AGE
ingress-nginx-controller 10.244.140.81:443,10.244.140.81:80 23h
ingress-nginx-controller-admission 10.244.140.81:8443 23h
# 查看 ingress-controller 的详细信息
user1@k8s-master:~$ kubectl describe endpoints -n ingress-nginx ingress-nginx-controller
Name: ingress-nginx-controller
Namespace: ingress-nginx
Labels: app.kubernetes.io/component=controller
app.kubernetes.io/instance=ingress-nginx
app.kubernetes.io/name=ingress-nginx
app.kubernetes.io/part-of=ingress-nginx
app.kubernetes.io/version=1.2.0
Annotations: endpoints.kubernetes.io/last-change-trigger-time: 2022-05-02T04:39:28Z
Subsets:
Addresses: 10.244.140.81
NotReadyAddresses: <none>
Ports:
Name Port Protocol
---- ---- --------
https 443 TCP
http 80 TCP
Events: <none>
# 3、部署服务
# 在 k8s-node-2 创建目录
user1@k8s-node-2:~$ mkdir -p /tmp/7/html
user1@k8s-node-2:~$ cd /tmp/7/html/
# 在 k8s-node-2 创建文件
user1@k8s-node-2:/tmp/7/html$ cat index.html
hi
# 编写 SVC 为 hi 的资源清单。指定在 k8s-node-2 节点，因为 hostpath 存储在 node-2 节点。
user1@k8s-master:~/cka/7$ cat nginx-app-service.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: nginx-app
namespace: ing-internal
spec:
replicas: 1
selector:
matchLabels:
app: nginx-app
template:
metadata:
labels:
app: nginx-app
spec:
nodeName: k8s-node-2
containers:
- name: nginx
image: nginx:1.18.0
imagePullPolicy: IfNotPresent
volumeMounts:
- name: html-hi
mountPath: /usr/share/nginx/html/
volumes:
- name: html-hi
hostPath:
path: /tmp/7/html
---
apiVersion: v1
kind: Service
metadata:
name: hi
namespace: ing-internal
spec:
selector:
app: nginx-app
ports:
- name: web
port: 5678
targetPort: 80
# 部署 SVC 和 pod
user1@k8s-master:~/cka/7$ kubectl apply -f nginx-app-service.yaml
deployment.apps/nginx-app created
service/hi created
# 查看部署的 SVC
user1@k8s-master:~$ kubectl get svc -n ing-internal
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
hi ClusterIP 10.101.142.58 <none> 5678/TCP 23h
# 查看部署的 pod
user1@k8s-master:~$ kubectl get pod -n ing-internal -o wide
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
nginx-app-778d9f8cbc-m9npr 1/1 Running 1 (9h ago) 23h 10.244.140.79 k8s-node-2 <none> <none>
# 4、测试访问
# 访问 SVC
user1@k8s-master:~$ curl 10.101.142.58:5678
hi
# 访问 pod
user1@k8s-master:~$ curl 10.244.140.79
hi
LAB 答案
# 切换 content
$ kubectl config use-context k8s
# 编写 ingress 的 yaml
$ cat pong.yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: pong
namespace: ing-internal
annotations:
nginx.ingress.kubernetes.io/rewrite-target: /
kubernetes.io/ingress.class: nginx #测试环境，获取不到IP，就添加该配置
spec:
rules:
- http:
paths:
- path: /hi
pathType: Prefix
backend:
service:
name: hi
port:
number: 5678
# 部署 ingress
$ kubectl apply -f pong.yaml
ingress.networking.k8s.io/pong created
LAB 验证
# 获取 ingress 的 IP 地址
user1@k8s-master:~$ kubectl get ingress -n ing-internal
NAME CLASS HOSTS ADDRESS PORTS AGE
pong <none> * 192.168.1.212 80 4h38m
# 测试访问，使用 ingress-nginx 的 svc 的 nodeport 端口 31116
user1@k8s-master:~$ curl http://192.168.1.212:31116/hi
hi
参考资料
- https://kubernetes.io/zh/docs/concepts/services-networking/ingress/
