标签：str extension 要求 cert ref cep git host work
ingress
可以配置一个入口来提供k8s上service从外部来访问的url、负载平衡流量、终止SSL和提供基于名称的虚拟主机。
配置ingress的yaml：
要求域名解析无误
要求service对应的pod正常
apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ingress namespace: test spec: rules: - host: test1.domain.com http: paths: - backend: serviceName: service1 servicePort: 8080 path: /
apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ingress namespace: test spec: rules: - host: test1.domain.com http: paths: - backend: serviceName: service1 servicePort: 8080 path: /aaa - backend: serviceName: service2 servicePort: 8080 path: /bbb
apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ingress namespace: test spec: rules: - host: test1.domain.com http: paths: - backend: serviceName: service1 servicePort: 8080 - host: test2.domain.com http: paths: - backend: serviceName: service4 servicePort: 8080
apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ingress namespace: test spec: rules: - host: test1.domain.com http: paths: - backend: serviceName: service1 servicePort: 8080 - http: paths: - backend: serviceName: service5 servicePort: 8080
apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ingress namespace: test spec: rules: - host: test1.domain.com http: paths: - backend: serviceName: service1 servicePort: 8080 tls: - hosts: - test1.domain.com secretName: domain-tls #证书见下
apiVersion: v1 data: tls.crt: cert（base64） #转码见下 tls.key: key（base64） kind: Secret metadata: name: domain-tls namespace: test type: kubernetes.io/tls
cat fullchain.pem | base64 | tr ‘\n‘ ‘ ‘ | sed s/[[:space:]]//g #中间去掉换行和空格 cat privkey.pem | base64 | tr ‘\n‘ ‘ ‘ | sed s/[[:space:]]//g
apiVersion: extensions/v1beta1 kind: Ingress metadata: name: test-ingress namespace: test annotations: nginx.ingress.kubernetes.io/proxy-connect-timeout: "600s" nginx.ingress.kubernetes.io/proxy-read-timeout: "600s" nginx.ingress.kubernetes.io/proxy-send-timeout: "600s" spec: rules: - host: test1.domain.com http: paths: - backend: serviceName: service1 servicePort: 8080 path: /
详细ingress链接：https://kubernetes.io/docs/concepts/services-networking/ingress/
ingress中annotations的配置选项：https://github.com/kubernetes/ingress-nginx/blob/master/docs/user-guide/nginx-configuration/annotations.md
标签：str extension 要求 cert ref cep git host work
原文地址：https://www.cnblogs.com/chy-op/p/10566657.html
