# 准备 ## 下载deploy.yaml https://github.com/kubernetes/ingress-nginx/blob/main/deploy/static/provider/baremetal/deploy.yaml # 替换镜像url并创建资源对象 ``` # 替换镜像url # 192.168.10.104:5000为本地镜像将 k8s.gcr.io/ingress-nginx/controller:v1.0.0@sha256:0851b34f69f69352bf168e6ccf30e1e20714a264ab1ecd1933e4d8c0fc3215c6 替换为 192.168.10.104:5000/k8s.gcr.io/ingress-nginx/controller:v1.0.0 将 k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.0@sha256:f3b6b39a6062328c095337b4cadcefd1612348fdd5190b1dcbcb9b9e90bd8068 替换为 192.168.10.104:5000/k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.0 # 创建资源对象 kubectl apply -f deploy.yaml ``` # 安装 ## 创建应用 ``` kubectl apply -f - < 80:30447/TCP,443:30976/TCP 4h41m # 修改hosts # 192.168.10.90为主节点ip echo '192.168.10.90 nginx.cw.net'>>/etc/hosts #我们这里设置了replicas=2，会产生两个容器，分别进入两个容器，增加一个文件 echo 'aaa' >/usr/share/nginx/html/a.html # 通过浏览器访问 http://nginx.cw.net:30447/a.html ``` # 部署方式hostNetwork ``` 1. kind: Deployment => kind: DaemonSet 2. 添加 hostNetwork: true vi deploy.yaml ... nodeSelector: kubernetes.io/os: linux serviceAccountName: ingress-nginx hostNetwork: true terminationGracePeriodSeconds: 300 ... kubectl apply -f deploy.yaml # 查看节点的对外ip [root@master ingress-nginx]# kubectl get po -n ingress-nginx -owide NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES ingress-nginx-admission-create--1-h7bvr 0/1 Completed 0 5h59m 10.244.1.4 node1 ingress-nginx-admission-patch--1-dg4m6 0/1 Completed 3 5h59m 10.244.2.4 node2 ingress-nginx-controller-cpdqw 1/1 Running 0 6m35s 192.168.10.92 node2 ingress-nginx-controller-tsdvz 1/1 Running 0 6m35s 192.168.10.91 node1 # 修改hosts # 192.168.10.91，192.168.10.92为子节点ip echo -e '192.168.10.91 nginx.cw.net\n192.168.10.92 nginx.cw.net'>>/etc/hosts #我们这里设置了replicas=2，会产生两个容器，分别进入两个容器，增加一个文件 echo 'aaa' >/usr/share/nginx/html/a.html # 通过浏览器访问 http://nginx.cw.net/a.html ``` # HTTPS 证书文件通过阿里云免费申请 ``` #创建secret kubectl create secret tls test-ingress-secret --cert=nginx.cw.net.pem --key=nginx.cw.net.key kubectl get secret kubectl describe secret test-ingress-secret vi test-ingress.yml ... spec: tls: - hosts: - nginx.cw.net secretName: test-ingress-secret rules: - host: "nginx.cw.net" ... kubectl apply -f test-ingress.yml ``` # 清理 ``` kubectl delete -f deploy.yaml kubectl delete -n default deployment nginx-deployment kubectl delete -n default service nginx-service kubectl delete -n default ingress test-ingress ``` # 参考 https://huangzhongde.cn/istio/Chapter3/Chapter3-1.html

# ingress.

k8s ingress 两种部署方式nodePort和hostNetwork