kubernetes核心实战（九）

14、Ingress

检查是否有安装

[root@k8s-master-node1 ~/yaml/test]# kubectl get pod,svc -n ingress-nginx

NAME                                           READY   STATUS      RESTARTS   AGE

pod/ingress-nginx-admission-create--1-74mtg    0/1     Completed   0          172m

pod/ingress-nginx-admission-patch--1-5qrct     0/1     Completed   0          172m

pod/ingress-nginx-controller-f97bd58b5-vr8c2   1/1     Running     0          172m

NAME                                         TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE

service/ingress-nginx-controller             NodePort    10.96.109.80    <none>        80:30127/TCP,443:36903/TCP   172m

service/ingress-nginx-controller-admission   ClusterIP   10.96.215.201   <none>        443/TCP                      172m

[root@k8s-master-node1 ~/yaml/test]#

若未安装可以查看官网文档：https://kubernetes.github.io/ingress-nginx/deploy/

创建环境：

[root@k8s-master-node1 ~/yaml/test]# vim ingress.yaml

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# cat ingress.yaml

apiVersion: apps/v1

kind: Deployment

metadata:

  name: hello-server

spec:

  replicas: 2

  selector:

    matchLabels:

      app: hello-server

  template:

    metadata:

      labels:

        app: hello-server

    spec:

      containers:

      - name: hello-server

        image: registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images/hello-server

        ports:

        - containerPort: 9000

---

apiVersion: apps/v1

kind: Deployment

metadata:

  labels:

    app: nginx-demo

  name: nginx-demo

spec:

  replicas: 2

  selector:

    matchLabels:

      app: nginx-demo

  template:

    metadata:

      labels:

        app: nginx-demo

    spec:

      containers:

      - image: nginx

        name: nginx

---

apiVersion: v1

kind: Service

metadata:

  labels:

    app: nginx-demo

  name: nginx-demo

spec:

  selector:

    app: nginx-demo

  ports:

  - port: 8000

    protocol: TCP

    targetPort: 80

---

apiVersion: v1

kind: Service

metadata:

  labels:

    app: hello-server

  name: hello-server

spec:

  selector:

    app: hello-server

  ports:

  - port: 8000

    protocol: TCP

    targetPort: 9000

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# kubectl  apply  -f ingress.yaml

deployment.apps/hello-server created

deployment.apps/nginx-demo created

service/nginx-demo created

service/hello-server created

[root@k8s-master-node1 ~/yaml/test]#

查看四层负载并测试

[root@k8s-master-node1 ~/yaml/test]# kubectl  get service

NAME               TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)          AGE

hello-server       ClusterIP   10.96.246.46    <none>        8000/TCP         21s

ingress-demo-app   ClusterIP   10.96.145.40    <none>        80/TCP           3h1m

kubernetes         ClusterIP   10.96.0.1       <none>        443/TCP          3h3m

my-dep             NodePort    10.96.241.162   <none>        8000:32306/TCP   23m

nginx              ClusterIP   None            <none>        80/TCP           115m

nginx-demo         ClusterIP   10.96.162.193   <none>        8000/TCP         21s

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# curl  -I 10.96.162.193:8000

HTTP/1.1 200 OK

Server: nginx/1.21.4

Date: Wed, 17 Nov 2021 09:49:40 GMT

Content-Type: text/html

Content-Length: 615

Last-Modified: Tue, 02 Nov 2021 14:49:22 GMT

Connection: keep-alive

ETag: "61814ff2-267"

Accept-Ranges: bytes

[root@k8s-master-node1 ~/yaml/test]# curl  -I 10.96.246.46:8000

HTTP/1.1 200 OK

Date: Wed, 17 Nov 2021 09:49:52 GMT

Content-Length: 12

Content-Type: text/plain; charset=utf-8

[root@k8s-master-node1 ~/yaml/test]#

创建七层

[root@k8s-master-node1 ~/yaml/test]# vim ingress-7.yaml

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# cat ingress-7.yaml

apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

  name: ingress-host-bar

spec:

  ingressClassName: nginx

  rules:

  - host: "hello.chenby.cn"

    http:

      paths:

      - pathType: Prefix

        path: "/"

        backend:

          service:

            name: hello-server

            port:

              number: 8000

  - host: "demo.chenby.cn"

    http:

      paths:

      - pathType: Prefix

        path: "/nginx"  # 把请求会转给下面的服务，下面的服务一定要能处理这个路径，不能处理就是404

        backend:

          service:

            name: nginx-demo  ## java，比如使用路径重写，去掉前缀nginx

            port:

              number: 8000

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# kubectl  apply  -f ingress-7.yaml

ingress.networking.k8s.io/ingress-host-bar created

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# kubectl  get ingress

NAME               CLASS    HOSTS                            ADDRESS        PORTS   AGE

ingress-demo-app   <none>   app.demo.com                     192.168.1.62   80      3h14m

ingress-host-bar   nginx    hello.chenby.cn,demo.chenby.cn   192.168.1.62   80      9m50s

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# kubectl  describe ingress  ingress-host-bar

Name:             ingress-host-bar

Namespace:        default

Address:          192.168.1.62

Default backend:  default-http-backend:80 (10.244.2.7:8080)

Rules:

  Host             Path  Backends

  ----             ----  --------

  hello.chenby.cn

                   /   hello-server:8000 (10.244.2.47:9000,10.244.2.48:9000)

  demo.chenby.cn

                   /nginx   nginx-demo:8000 (10.244.0.13:80,10.244.1.34:80)

Annotations:       <none>

Events:

  Type    Reason  Age                    From                      Message

  ----    ------  ----                   ----                      -------

  Normal  Sync    6m26s (x2 over 6m50s)  nginx-ingress-controller  Scheduled for sync

[root@k8s-master-node1 ~/yaml/test]#

电脑上写死hosts

[root@k8s-master-node1 ~/yaml/test]# kubectl  get service ingress-demo-app

NAME               TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)   AGE

ingress-demo-app   ClusterIP   10.96.145.40   <none>        80/TCP    3h15m

[root@k8s-master-node1 ~/yaml/test]# 

10.96.145.40 hello.chenby.cn

10.96.145.40 demo.chenby.cn

测试访问

[root@k8s-master-node1 ~/yaml/test]# curl hello.chenby.cn

Hostname: ingress-demo-app-694bf5d965-8rh7f

IP: 127.0.0.1

IP: 10.244.1.6

RemoteAddr: 192.168.1.61:49809

GET / HTTP/1.1

Host: hello.chenby.cn

User-Agent: curl/7.68.0

Accept: */*

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# curl demo.chenby.cn

Hostname: ingress-demo-app-694bf5d965-swkpb

IP: 127.0.0.1

IP: 10.244.2.4

RemoteAddr: 192.168.1.61:57797

GET / HTTP/1.1

Host: demo.chenby.cn

User-Agent: curl/7.68.0

Accept: */*

[root@k8s-master-node1 ~/yaml/test]#

url 重写

[root@k8s-master-node1 ~/yaml/test]# vim ingress-url

[root@k8s-master-node1 ~/yaml/test]# cat ingress-url.yaml

apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

  annotations:

    nginx.ingress.kubernetes.io/rewrite-target: /$2

  name: ingress-host-bar

spec:

  ingressClassName: nginx

  rules:

  - host: "hello.chenby.cn"

    http:

      paths:

      - pathType: Prefix

        path: "/"

        backend:

          service:

            name: hello-server

            port:

              number: 8000

  - host: "demo.chenby.cn"

    http:

      paths:

      - pathType: Prefix

        path: "/nginx(/|$)(.*)"  # 把请求会转给下面的服务，下面的服务一定要能处理这个路径，不能处理就是404

        backend:

          service:

            name: nginx-demo  ## java，比如使用路径重写，去掉前缀nginx

            port:

              number: 8000

[root@k8s-master-node1 ~/yaml/test]# kubectl  apply -f ingress-url.yaml

ingress.networking.k8s.io/ingress-host-bar created

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# curl hello.chenby.cn

Hostname: ingress-demo-app-694bf5d965-8rh7f

IP: 127.0.0.1

IP: 10.244.1.6

RemoteAddr: 192.168.1.61:42303

GET / HTTP/1.1

Host: hello.chenby.cn

User-Agent: curl/7.68.0

Accept: */*

[root@k8s-master-node1 ~/yaml/test]# curl demo.chenby.cn

Hostname: ingress-demo-app-694bf5d965-swkpb

IP: 127.0.0.1

IP: 10.244.2.4

RemoteAddr: 192.168.1.61:1108

GET / HTTP/1.1

Host: demo.chenby.cn

User-Agent: curl/7.68.0

Accept: */*

[root@k8s-master-node1 ~/yaml/test]#

流量限制

[root@k8s-master-node1 ~/yaml/test]# vim ingress-limit

[root@k8s-master-node1 ~/yaml/test]# cat ingress-limit.yaml

apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

  name: ingress-limit-rate

  annotations:

    nginx.ingress.kubernetes.io/limit-rps: "1"

spec:

  ingressClassName: nginx

  rules:

  - host: "haha.chenby.cn"

    http:

      paths:

      - pathType: Exact

        path: "/"

        backend:

          service:

            name: nginx-demo

            port:

              number: 8000

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# kubectl apply -f ingress-limit.yaml

ingress.networking.k8s.io/ingress-limit-rate created

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# vim /etc/hosts

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# curl haha.chenby.cn

Hostname: ingress-demo-app-694bf5d965-8rh7f

IP: 127.0.0.1

IP: 10.244.1.6

RemoteAddr: 192.168.1.61:1676

GET / HTTP/1.1

Host: haha.chenby.cn

User-Agent: curl/7.68.0

Accept: */*

[root@k8s-master-node1 ~/yaml/test]#

注：可以将server 改为nodeport 即可在外部访问，将 type 改为 NodePort

[root@k8s-master-node1 ~/yaml/test]# kubectl  get service ingress-demo-app

NAME               TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)   AGE

ingress-demo-app   ClusterIP   10.96.145.40   <none>        80/TCP    6h27m

[root@k8s-master-node1 ~/yaml/test]# kubectl  edit service ingress-demo-app

service/ingress-demo-app edited

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]#

[root@k8s-master-node1 ~/yaml/test]# kubectl  get service ingress-demo-app

NAME               TYPE       CLUSTER-IP     EXTERNAL-IP   PORT(S)        AGE

ingress-demo-app   NodePort   10.96.145.40   <none>        80:30975/TCP   6h28m

[root@k8s-master-node1 ~/yaml/test]#

https://blog.csdn.net/qq_33921750

https://my.oschina.net/u/3981543

https://www.zhihu.com/people/chen-bu-yun-2

https://segmentfault.com/u/hppyvyv6/articles

https://juejin.cn/user/3315782802482007

https://space.bilibili.com/352476552/article

https://cloud.tencent.com/developer/column/93230

知乎、CSDN、开源中国、思否、掘金、哔哩哔哩、腾讯云

kubernetes核心实战（九）的更多相关文章

Kubernetes 核心概念
什么是Kubernetes? Kubernetes(k8s)是自动化容器操作的开源平台,这些操作包括部署,调度和节点集群间扩展.如果你曾经用过Docker容器技术部署容器,那么可以将Docker看成K ...
十分钟带你理解Kubernetes核心概念
什么是Kubernetes? Kubernetes(k8s)是自动化容器操作的开源平台,这些操作包括部署,调度和节点集群间扩展.如果你曾经用过Docker容器技术部署容器,那么可以将Docker看成K ...
Kubernetes核心概念简介
本文将会简单介绍Kubernetes的核心概念.因为这些定义可以在Kubernetes的文档中找到,所以文章也会避免用大段的枯燥的文字介绍.相反,我们会使用一些图表(其中一些是动画)和示例来解释这些概 ...
k8s kubernetes 核心笔记镜像仓库项目k8s改造(含最新k8s v1.16.2版本)
k8s kubernetes 核心笔记镜像仓库项目k8s改造 2019/10/24 Chenxin 一基本资料一参考: https://kubernetes.io/ 官网 https://k ...
后端技术杂谈11：十分钟理解Kubernetes核心概念
本系列文章将整理到我在GitHub上的<Java面试指南>仓库,更多精彩内容请到我的仓库里查看本文转自 https://github.com/h2pl/Java-Tutorial 喜欢的 ...
01 . 容器编排简介及Kubernetes核心概念
Kubernetes简介 Kubernetes是谷歌严格保密十几年的秘密武器-Borg的一个开源版本,是Docker分布式系统解决方案.2014年由Google公司启动. Kubernetes提供了面 ...
[转]十分钟带你理解Kubernetes核心概念
本文将会简单介绍 Kubernetes的核心概念.因为这些定义可以在Kubernetes的文档中找到,所以文章也会避免用大段的枯燥的文字介绍.相反,我们会使用一些图表(其中一些是动画)和示例来解释这些 ...
SpringSecurity权限管理系统实战—九、数据权限的配置
目录 SpringSecurity权限管理系统实战-一.项目简介和开发环境准备 SpringSecurity权限管理系统实战-二.日志.接口文档等实现 SpringSecurity权限管理系统实战-三 ...
第3 章： Kubernetes 核心概念
Kubernetes 核心概念本文整理自 CNCF 和阿里巴巴联合举办的云原生技术公开课的课时 3:Kubernetes 核心概念.本次课程中,阿里巴巴资深技术专家.CNCF 9个 TCO 之一李 ...
kubernetes实战(九)：k8s集群动态存储管理GlusterFS及使用Heketi扩容GlusterFS集群
1.准备工作所有节点安装GFS客户端 yum install glusterfs glusterfs-fuse -y 如果不是所有节点要部署GFS管理服务,就在需要部署的节点上打上标签 [root@ ...

随机推荐

Gabor滤波（个人学习）
Gabor滤波 1.优点 Gabor小波与人类视觉系统中简单细胞的视觉刺激响应非常相似.在提取目标的局部空间和频率与信息方面具有良好的特性. 对于图像的边缘敏感,能够提供良好的方向选择和尺度选择.因此 ...
BGP反射器
路由反射器是一种减少自治系统内IBGP对等体连接数量的方法. 根据BGP路由通告原则,要求一个AS内的所有BGP Speaker将建立全连接关系(BGP Speaker两两建立邻接关系).当AS内的B ...
intellij idea中怎么没有git版本控制设置项
在使用intellij idea的时候想要使用git进行版本控制,但是在设置项和界面没有发现相关内容,怎么回事呢? 我们先打开电脑,从桌面的快捷方式打开intellij idea,进入到intelli ...
小梅哥课程学习——LED花式玩法（从计数器器到线性序列机）——实验六
//每隔10ms,让led灯的一个8状态循环执行一次(每个变化时间值小一点,方便测试比如设置为10us) 源代码 module counter_led_6( clk, reset_n, ...
.NetCore中配置Ef
1.在NuGet中下载 Microsoft.EntityFrameworkCore.Tools Microsoft.EntityFrameworkCore.SqlServer 2.需要在Api层.实现 ...
openvas在centos中扫描单项的python实现
使用gvm_cli命令来实现先创建一个空的配置 copy_id = '085569ce-73ed-11df-83c3-002264764cea' new_config = ''' <creat ...
STL练习-ACboy needs your help again!
ACboy was kidnapped!! he miss his mother very much and is very scare now.You can't image how dark ...
windows 2016 安装docker
windows 2016 安装docker 前提条件:windows server 2016安装更新 1:用管理员打开windows PowerShell Install-PackageProvide ...
shell命令查找文件
1.find命令的参数下面是find命令一些常用参数的例子,有用到的时候查查就行了,像上面前几个贴子,都用到了其中的的一些参数,也可以用man或查看论坛里其它贴子有find命令手册使用name选项文件 ...
printf( )和scanf( )
printf()的转换说明转换说明输出 %a,%A 浮点数,十六进制数和p记数法 %c 单个字符 %d.%i 有符号的十进制整数 %e,%E 浮点数,e记数法 %f 浮点数,十进制计数法 %g/% ...