{"id":2082,"date":"2025-06-27T13:39:08","date_gmt":"2025-06-27T05:39:08","guid":{"rendered":"http:\/\/113.45.254.23\/?p=2082"},"modified":"2025-06-27T13:39:10","modified_gmt":"2025-06-27T05:39:10","slug":"k8s%e4%b8%8b%e7%9a%84ingress-nginx%e6%8e%a7%e5%88%b6%e5%99%a8%ef%bc%9a%e7%94%9f%e4%ba%a7%e7%8e%af%e5%a2%83%e5%ae%9e%e6%88%98%e9%85%8d%e7%bd%ae%e6%8c%87%e5%8d%97","status":"publish","type":"post","link":"http:\/\/113.45.254.23\/?p=2082","title":{"rendered":"K8s\u4e0b\u7684Ingress-Nginx\u63a7\u5236\u5668\uff1a\u751f\u4ea7\u73af\u5883\u5b9e\u6218\u914d\u7f6e\u6307\u5357"},"content":{"rendered":"\n

\u77e5\u8bc6\u70b9\uff1a<\/h2>\n\n\n\n
K8s\u4e0b\u7684Ingress-Nginx\u63a7\u5236\u5668\uff1a\u751f\u4ea7\u73af\u5883\u5b9e\u6218\u914d\u7f6e\u6307\u5357\u76f8\u5173\uff1anginx\u548ctomact\u7684\u5b9e\u9a8c\n\u5b9e\u9a8c\u73af\u5883\uff1a\u4e94\u53f0\u865a\u62df\u673a\u8fd8\u539f\u81f3\u9ad8\u53ef\u7528\u96c6\u7fa4\nIngress Controller\u5de5\u4f5c\u539f\u7406\n\u4e3a\u4e86\u4f7f\u5f97Ingress\u8d44\u6e90\u6b63\u5e38\u5de5\u4f5c\uff0c\u96c6\u7fa4\u4e2d\u5fc5\u987b\u8981\u6709\u4e2aIngress Controller\u6765\u89e3\u6790Ingress\u7684\u8f6c\u53d1\u89c4\u5219\u3002Ingress Controller\u6536\u5230\u8bf7\u6c42\uff0c\u5339\u914dIngress\u8f6c\u53d1\u89c4\u5219\u8f6c\u53d1\u5230\u540e\u7aefService\uff0c\u800cService\u8f6c\u53d1\u5230Pod\uff0c\u6700\u7ec8\u7531Pod\u5904\u7406\u8bf7\u6c42\u3002Kubernetes\u4e2dService\u3001Ingress\u4e0eIngress Controller\u6709\u7740\u4ee5\u4e0b\u5173\u7cfb\uff1a\nService\u662f\u540e\u7aef\u771f\u5b9e\u670d\u52a1\u7684\u62bd\u8c61\uff0c\u4e00\u4e2aService\u53ef\u4ee5\u4ee3\u8868\u591a\u4e2a\u76f8\u540c\u7684\u540e\u7aef\u670d\u52a1\u3002\nIngress\u662f\u53cd\u5411\u4ee3\u7406\u89c4\u5219\uff0c\u7528\u6765\u89c4\u5b9aHTTP\/HTTPS\u8bf7\u6c42\u5e94\u8be5\u88ab\u8f6c\u53d1\u5230\u54ea\u4e2aService\u4e0a\u3002\u4f8b\u5982\u6839\u636e\u8bf7\u6c42\u4e2d\u4e0d\u540c\u7684Host\u548cURL\u8def\u5f84\uff0c\u8ba9\u8bf7\u6c42\u843d\u5230\u4e0d\u540c\u7684 Service\u4e0a\u3002\nIngress Controller\u662f\u4e00\u4e2a\u53cd\u5411\u4ee3\u7406\u7a0b\u5e8f\uff0c\u8d1f\u8d23\u89e3\u6790Ingress\u7684\u53cd\u5411\u4ee3\u7406\u89c4\u5219\u3002\u5982\u679cIngress\u6709\u589e\u5220\u6539\u7684\u53d8\u52a8\uff0cIngress Controller\u4f1a\u53ca\u65f6\u66f4\u65b0\u81ea\u5df1\u76f8\u5e94\u7684\u8f6c\u53d1\u89c4\u5219\uff0c\u5f53Ingress Controller\u6536\u5230\u8bf7\u6c42\u540e\u5c31\u4f1a\u6839\u636e\u8fd9\u4e9b\u89c4\u5219\u5c06\u8bf7\u6c42\u8f6c\u53d1\u5230\u5bf9\u5e94\u7684Service\u3002\nIngress Controller\u901a\u8fc7API Server\u83b7\u53d6Ingress\u8d44\u6e90\u7684\u53d8\u5316\uff0c\u52a8\u6001\u5730\u751f\u6210Load Balancer\uff08\u4f8b\u5982Nginx\uff09\u6240\u9700\u7684\u914d\u7f6e\u6587\u4ef6\uff08\u4f8b\u5982nginx.conf\uff09\uff0c\u7136\u540e\u91cd\u65b0\u52a0\u8f7dLoad Balancer\uff08\u4f8b\u5982\u6267\u884cnginx -s load\u91cd\u65b0\u52a0\u8f7dNginx\u3002\uff09\u6765\u751f\u6210\u65b0\u7684\u8def\u7531\u8f6c\u53d1\u89c4\u5219\u3002<\/code><\/pre>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u6240\u6709\u8282\u70b9\u4e0a\u4f20nginx-ingress controller\u6587\u4ef6\uff1a<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e00\u3001\u6240\u6709\u8282\u70b9\u90fd\u5bfc\u5165Nginx-ingress\u955c\u50cf\uff0cjingress\u505a\u53cd\u5411\u4ee3\u7406\u7684<\/h2>\n\n\n\n
[root@1-5 ~]# ctr -n k8s.io images import aliyun-ingress-controller-v1.9.3.tar\n\u6240\u6709\u8282\u70b9\u90fd\u5bfc\u5165Nginx-ingress\u955c\u50cf\uff0cjingress\u505a\u53cd\u5411\u4ee3\u7406\u7684\nunpacking registry-cn-hangzhou.ack.aliyuncs.com\/acs\/aliyun-ingress-controller:v1.9.3-aliyun.1 (sha256:04cb236ebf4dd1f868399cb79425027d64f6e4d95a38a980cf753573f46637ee)...done\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
[root@master1 ~]# ls\naliyun-ingress-controller-v1.9.3.tar  calico.tar.gz     kubeadm.yaml\naliyun-ingress-nginx.yaml             calico.yaml       nginx-ingress-controller_v1.11.2.tar\nanaconda-ks.cfg                       kubeadm-init.log\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
\u4e8c\u3001\u5e94\u7528aliyun ingress\u914d\u7f6e\u6587\u4ef6<\/h2>\n\n\n\n
[root@master1 ~]# kubectl apply -f aliyun-ingress-nginx.yaml\n\u5e94\u7528aliyun ingress\u914d\u7f6e\u6587\u4ef6\nserviceaccount\/ingress-nginx created\nrole.rbac.authorization.k8s.io\/ingress-nginx created\nclusterrole.rbac.authorization.k8s.io\/ingress-nginx created\nrolebinding.rbac.authorization.k8s.io\/ingress-nginx created\nclusterrolebinding.rbac.authorization.k8s.io\/ingress-nginx created\nservice\/nginx-ingress-lb created\nservice\/ingress-nginx-controller-admission created\nconfigmap\/nginx-configuration created\nconfigmap\/tcp-services created\nconfigmap\/udp-services created\ndaemonset.apps\/nginx-ingress-controller created\ningressclass.networking.k8s.io\/nginx-master created\nvalidatingwebhookconfiguration.admissionregistration.k8s.io\/ingress-nginx-admission created\nserviceaccount\/ingress-nginx-admission created\nclusterrole.rbac.authorization.k8s.io\/ingress-nginx-admission created\nclusterrolebinding.rbac.authorization.k8s.io\/ingress-nginx-admission created\nrole.rbac.authorization.k8s.io\/ingress-nginx-admission created\nrolebinding.rbac.authorization.k8s.io\/ingress-nginx-admission created\njob.batch\/ingress-nginx-admission-create created\njob.batch\/ingress-nginx-admission-patch created<\/code><\/pre>\n\n\n\n
\u914d\u7f6e\u6587\u4ef6\u91cc\u8981\u6c42\u6253\u6807\u7b7e\uff0c\u540e\u624d\u80fd\u663e\u793a<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u4e09\u3001\u7ed9Node1\u3001Node2\u8282\u70b9\u6253\u6807\u7b7e\uff1a<\/h2>\n\n\n\n
[root@master1 ~]# kubectl label node node1 boge\/ingress-controller-ready=true\t\u7ed9Node1\u8282\u70b9\u6253\u6807\u7b7e\nnode\/node1 labeled\n[root@master1 ~]# kubectl label node node2 boge\/ingress-controller-ready=true\t\u7ed9Node2\u8282\u70b9\u6253\u6807\u7b7e\nnode\/node2 labeled<\/code><\/pre>\n\n\n\n
\u56db\u3001\u83b7\u53d6Kubernetes\u96c6\u7fa4\u4e2dkube-system\u547d\u540d\u7a7a\u95f4\u4e0b\u7684\u6240\u6709Pod\u8d44\u6e90\u4fe1\u606f<\/h2>\n\n\n\n
[root@master1 ~]# kubectl -n kube-system get pod\t\t\u83b7\u53d6Kubernetes\u96c6\u7fa4\u4e2dkube-system\u547d\u540d\u7a7a\u95f4\u4e0b\u7684\u6240\u6709Pod\u8d44\u6e90\u4fe1\u606f\nNAME                                       READY   STATUS      RESTARTS      AGE\ncalico-kube-controllers-7dc5458bc6-c9pdn   1\/1     Running     1 (16m ago)   2d4h\ncalico-node-7ztlx                          1\/1     Running     1 (16m ago)   2d4h\ncalico-node-86w2s                          1\/1     Running     1 (17m ago)   2d4h\ncalico-node-fp6r7                          1\/1     Running     1 (16m ago)   2d4h\ncalico-node-fwv59                          1\/1     Running     1 (16m ago)   2d4h\ncalico-node-xbwwc                          1\/1     Running     1 (16m ago)   2d4h\ncoredns-7c445c467-6dlt5                    1\/1     Running     1 (16m ago)   2d6h\ncoredns-7c445c467-wjskw                    1\/1     Running     1 (16m ago)   2d6h\netcd-master1                               1\/1     Running     2 (17m ago)   2d6h\netcd-master2                               1\/1     Running     2 (16m ago)   2d6h\netcd-master3                               1\/1     Running     2 (16m ago)   2d6h\ningress-nginx-admission-create-z4f9m       0\/1     Completed   0             91s\ningress-nginx-admission-patch-bvfv5        0\/1     Completed   0             91s\nkube-apiserver-master1                     1\/1     Running     2 (17m ago)   2d6h\nkube-apiserver-master2                     1\/1     Running     2 (16m ago)   2d6h\nkube-apiserver-master3                     1\/1     Running     2 (16m ago)   2d6h\nkube-controller-manager-master1            1\/1     Running     2 (17m ago)   2d6h\nkube-controller-manager-master2            1\/1     Running     2 (16m ago)   2d6h\nkube-controller-manager-master3            1\/1     Running     2 (16m ago)   2d6h\nkube-proxy-46hzl                           1\/1     Running     1 (16m ago)   2d5h\nkube-proxy-4x9w7                           1\/1     Running     1 (16m ago)   2d5h\nkube-proxy-h2rl5                           1\/1     Running     2 (16m ago)   2d6h\nkube-proxy-htzg7                           1\/1     Running     2 (17m ago)   2d6h\nkube-proxy-sc6fg                           1\/1     Running     2 (16m ago)   2d6h\nkube-scheduler-master1                     1\/1     Running     2 (17m ago)   2d6h\nkube-scheduler-master2                     1\/1     Running     2 (16m ago)   2d6h\nkube-scheduler-master3                     1\/1     Running     2 (16m ago)   2d6h\nnginx-ingress-controller-6dntr             1\/1     Running     0             28s\nnginx-ingress-controller-q69fd             1\/1     Running     0             33s\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
\u4e94\u3001\u67e5\u770bpod\u8282\u70b9\u4fe1\u606f<\/h2>\n\n\n\n
[root@master1 ~]# kubectl -n kube-system get pod -o wide\t\t\u67e5\u770bpod\u8282\u70b9\u4fe1\u606f\nn\u662f\u540d\u5b57\t\u67e5\u770b\u547d\u540d\u7a7a\u95f4kube-system pod\u7684\u8be6\u7ec6\u4fe1\u606f\uff08\u4e0d\u663e\u793aaliyun-ingress\u7684\u4fe1\u606f\uff09\nNAME                                       READY   STATUS      RESTARTS       AGE     IP              NODE      NOMINATED NODE   READINESS GATES\ncalico-kube-controllers-7dc5458bc6-c9pdn   1\/1     Running     2 (98s ago)    2d5h    10.244.136.7 \nnginx-ingress-controller-6dntr             1\/1     Running     1 (92s ago)    5m12s   192.168.7.184   node2     <none>           <none>\nnginx-ingress-controller-q69fd             1\/1     Running     1 (94s ago)    5m17s   192.168.7.183   node1     <none>           <none>\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u516d\u3001\u518d\u5f00\u4e00\u53f0\u62c9\u53d6\u5e76\u4e0b\u8f7d\u955c\u50cf\uff1a<\/h2>\n\n\n\n
[root@Server10 ~]# systemctl status docker\n\u25cf docker.service - Docker Application Container Engine\n     Loaded: loaded (\/usr\/lib\/systemd\/system\/docker.service; enabled; preset: disabled)\n     Active: active (running) since Thu 2025-06-26 15:10:32 CST; 1min 4s ago\nTriggeredBy: \u25cf docker.socket\n       Docs: https:\/\/docs.docker.com\n   Main PID: 1131 (dockerd)\n      Tasks: 9\n     Memory: 101.3M\n        CPU: 402ms\n     CGroup: \/system.slice\/docker.service\n             \u2514\u25001131 \/usr\/bin\/dockerd -H fd:\/\/ --containerd=\/run\/containerd\/containerd.sock\n\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.862124213+08:00\" level=warning msg=\"Erro>\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.883357479+08:00\" level=info msg=\"Loading>\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.893807841+08:00\" level=info msg=\"Docker >\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.893896107+08:00\" level=info msg=\"Initial>\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.896529767+08:00\" level=warning msg=\"CDI >\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.896557927+08:00\" level=warning msg=\"CDI >\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.912830212+08:00\" level=info msg=\"Complet>\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.923614845+08:00\" level=info msg=\"Daemon >\n6\u6708 26 15:10:32 Server10 dockerd[1131]: time=\"2025-06-26T15:10:32.923763584+08:00\" level=info msg=\"API lis>\n6\u6708 26 15:10:32 Server10 systemd[1]: Started Docker Application Container Engine.\n\n[root@Server10 ~]# \n[root@Server10 ~]# docker pull busybox:1.29.2<\/code><\/pre>\n\n\n\n
[root@Server10 ~]# docker images\nREPOSITORY   TAG       IMAGE ID       CREATED         SIZE\nnginx        1.26.0    94543a6c1aef   13 months ago   188MB\nbusybox      1.29.2    e1ddd7948a1c   6 years ago     1.16MB\n[root@Server10 ~]# \n[root@Server10 ~]# docker save busybox.1.29.2.tar busybox:1.29.2\ncowardly refusing to save to a terminal. Use the -o flag or redirect\n[root@Server10 ~]# docker save -o busybox.1.29.2.tar busybox:1.29.2  busybox.1.29.2.tar \u5907\u4efd\u7684 busybox:1.29.2\u955c\u50cf\u6e90\n\n[root@Server10 ~]# ls\nanaconda-ks.cfg  busybox.1.29.2.tar\n[root@Server10 ~]# <\/code><\/pre>\n\n\n\n
\u4e03\u3001\u5c06\u4e0b\u8f7d\u5230\u672c\u5730\u7684\u955c\u50cf\u4e0a\u4f20\u52307.183\u30017.184 node1\\node2\u4e0a<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
[root@node1 ~]# ls\naliyun-ingress-controller-v1.9.3.tar  anaconda-ks.cfg  busybox-1-28.tar.gz  busybox.1.29.2.tar  calico.tar.gz  nginx-1.21.6.tar\n[root@node1 ~]#<\/code><\/pre>\n\n\n\n
[root@node2 ~]# ls\naliyun-ingress-controller-v1.9.3.tar  anaconda-ks.cfg  busybox-1-28.tar.gz  busybox.1.29.2.tar  calico.tar.gz  nginx-1.21.6.tar\n[root@node2 ~]#<\/code><\/pre>\n\n\n\n
\u516b\u3001node1\\2\u8282\u70b9\u90fd\u5bfc\u5165busybox\u955c\u50cf<\/h2>\n\n\n\n
[root@node1 ~]# ctr -n k8s.io images import busybox-1-28.tar.gz  node1\\2\u8282\u70b9\u90fd\u5bfc\u5165busybox\u955c\u50cf\nunpacking docker.io\/library\/busybox:1.28 (sha256:585093da3a716161ec2b2595011051a90d2f089bc2a25b4a34a18e2cf542527c)...done\n[root@node1 ~]#<\/code><\/pre>\n\n\n\n
[root@node2 ~]# ctr -n k8s.io images import busybox-1-28.tar.gz\n\nunpacking docker.io\/library\/busybox:1.28 (sha256:585093da3a716161ec2b2595011051a90d2f089bc2a25b4a34a18e2cf542527c)...done\n\n[root@node2 ~]#<\/code><\/pre>\n\n\n\n
[root@node1 ~]# ctr -n k8s.io images import nginx-1.21.6.tar\tnode1\u5bfc\u5165nginx-1.21.6\u955c\u50cf\nunpacking docker.io\/library\/nginx:1.21.6 (sha256:94b808e393739b5363decf631a746d0241083d40eb05f07200a6d1c0c16f54b8)...done\n[root@node1 ~]#<\/code><\/pre>\n\n\n\n
[root@node2 ~]#  ctr -n k8s.io images import nginx-1.21.6.tar\tnode2\u5bfc\u5165nginx-1.21.6\u955c\u50cf\nunpacking docker.io\/library\/nginx:1.21.6 (sha256:94b808e393739b5363decf631a746d0241083d40eb05f07200a6d1c0c16f54b8)...done\n[root@node2 ~]#<\/code><\/pre>\n\n\n\n
\u4e5d\u3001\u521b\u5efanginx\u7684\u914d\u7f6e\u6587\u4ef6<\/h2>\n\n\n\n
[root@master1 ~]# vim nginx.yaml\t\t\t\t\u521b\u5efanginx\u7684\u914d\u7f6e\u6587\u4ef6\n[root@master1 ~]#\n---\nkind: Service\t\t\t\u7c7b\u578bservice\napiVersion: v1\t\t\tapi\u7248\u672c\u4e3a1\nmetadata:\t\t\t\u6e90\u6570\u636e\u540d\u79f0\u4e3a\uff1anew-nginx\n  name: new-nginx\nspec:\t\t\t\t\u8d44\u6e90\u5bf9\u8c61\u7684\u89c4\u683c\u5b9a\u4e49\n  selector:\t\t\t\u8c03\u5ea6\u5668\n    app: new-nginx\tapp\u53ebnew-nginx\n  ports:\t\t\t\t\u5b9a\u4e49\u7aef\u53e3\n    - name: http-port\t\u7f51\u7ad9\u7684pod\n      port: 80\t\t\u7aef\u53e380\n      protocol: TCP\t\u534f\u8baeTCP\n      targetPort: 80\t\u76ee\u6807\u7aef\u53e380\n\n---\n# \u65b0\u7248\u672ck8s\u7684ingress\u914d\u7f6e\napiVersion: networking.k8s.io\/v1\tapi\u7248\u672cnetworking.k8s.io\/v1\nkind: Ingress\t\t\t\t\t\u7c7b\u578b\uff1aIngress\nmetadata:\t\t\t\t\t\u6e90\u6570\u636e\n  name: new-nginx\t\t\t\u540d\u79f0\u4e3a\uff1anew-nginx\n  annotations:\t\t\t\t\u6ce8\u91ca\n    kubernetes.io\/ingress.class: \"nginx\"\t\tk8singress\u7684\u7c7bnginx\n    nginx.ingress.kubernetes.io\/force-ssl-redirect: \"true\"\t\t\u5f3a\u5236ssl\u91cd\u5b9a\u5411\uff1a\u5fc5\u987bhttps\n    nginx.ingress.kubernetes.io\/whitelist-source-range: 0.0.0.0\/0\t\u5b9a\u4e49\u767d\u540d\u5355\u4e3a\u4efb\u4f55IP\n    nginx.ingress.kubernetes.io\/configuration-snippet: |\t\t\u914d\u7f6e\u7247\u6bb5\uff1a\n      if ($host != 'www.benet.com' ) {\t\t\t\u5982\u679c\u8f93\u5165\u7684\u57df\u540d\u662fwww.benet.com\n        rewrite ^ https:\/\/www.benet.com$request_uri permanent;\t\t\n#\u81ea\u52a8\u91cd\u5b9a\u5411\u4e3a\uff1ahttps:\/\/www.benet.com\n      }\nspec:\t\t\t\t\t\t\t\t\t\u8d44\u6e90\u5bf9\u8c61\u7684\u89c4\u683c\u5b9a\u4e49\n  rules:\t\t\t\t\t\t\t\t\t\u89c4\u683c\n    - host: benet.com\t\t\t\t\t\u4e3b\u673a\uff1abenet.com\t\u4e3b\u673a\u540d\uff1abenet.com\u4e00\u79cd\u60c5\u51b5\n      http:\t\t\t\t\t\t\t\t\u8d85\u6587\u672c\u94fe\u63a5\u534f\u8bae\n        paths:\t\t\t\t\t\t\t\u8def\u5f84\n          - backend:\t\t\t\t\t\t\u540e\u53f0\n              service:\t\t\t\t\t\u670d\u52a1\n                name: new-nginx\t\t\t\n                port:\t\t\t\t\t\u7aef\u53e3\uff1a80\n                  number: 80\t\t\t\t\n            path: \/\t\t\t\t\t\t\u6839\u4e0b\n            pathType: Prefix\t\t\t\t\u524d\u7f00\n    - host: m.benet.com\t\t\t\t\t\u4e3b\u673a\u540d\uff1am.benet.com\u4e8c\u79cd\u60c5\u51b5\n      http:\n        paths:\n          - backend:\n              service:\n                name: new-nginx\n                port:\n                  number: 80\n            path: \/\n            pathType: Prefix\n    - host: www.benet.com\t\t\t\t\t\u4e3b\u673a\u540d\uff1a\u7b2c\u4e09\u79cd\u5b9a\u4e49\u57df\u540d\u7684\u683c\u5f0f\n      http:\n        paths:\n          - backend:\n              service:\n                name: new-nginx\n                port:\n                  number: 80\n            path: \/\n            pathType: Prefix\n  tls:\t\t\t\t\t\t\t\t\t\u4e09\u79cd\u57df\u540d\u90fd\u662f\u4ee5https\n      - hosts:\n          - benet.com\n          - m.benet.com\n          - www.benet.com\n        secretName: benet-com-tls\n\n# tls secret create command:\n#   kubectl -n <namespace> create secret tls boge-com-tls --key boge-com.key --cert boge-com.csr\n\n---\napiVersion: apps\/v1\t\t\t\t\tapi\u7684\u7248\u672c\u7c7b\u578b\u4e3a\u65e0\u72b6\u6001\u670d\u52a1\nkind: Deployment\nmetadata:\n  name: new-nginx\t\t\t\t\t\u5143\u6570\u636e\u4e3anew-nginx\n  labels:\t\t\t\t\t\t\t\t\u5377\u6807\n    app: new-nginx\nspec:\t\t\t\t\t\t\t\t\u8d44\u6e90\u5b9a\u4e49\u5bf9\u8c61\uff1a\n  replicas: 3  \t\t\t\t\t\t# \u6570\u91cf\u53ef\u4ee5\u6839\u636eNODE\u8282\u70b9\u6570\u91cf\u6765\u5b9a\u4e49\n  selector:\t\t\t\t\t\t\t\u8c03\u5ea6\u5668\n    matchLabels:\n      app: new-nginx\t\t\t\t\t\u5173\u8054\u5377\u6807\u4e3anew-nginx\n  template:\t\t\t\t\t\t\t\u6a21\u677f\n    metadata:\t\t\t\t\t\t\u5143\u6570\u636e\n      labels:\t\t\t\t\t\t\t\u5377\u6807\uff1anew-nginx\n        app: new-nginx\n    spec:\n      containers:\t\t\t\t\t\t\u8d44\u6e90\u5b9a\u4e49\u5bf9\u8c61\uff1a\u5bb9\u5668\n#--------------------------------------------------\n      - name: new-nginx\n        image: nginx:1.21.6\t\t\t\t\u955c\u50cf\uff1anginx:1.21.6\n        env:\t\t\t\t\t\t\t\u5b9a\u4e49\u73af\u5883\u53d8\u91cf\n          - name: TZ\t\t\t\t\t\u65f6\u533a\n            value: Asia\/Shanghai\t\t\u4e9a\u6d32\u4e0a\u6d77\n        ports:\n        - containerPort: 80\t\t\t\t\u5bb9\u5668\u7684\u7aef\u53e380\n        volumeMounts:\t\t\t\t\u5b58\u50a8\u6302\u8f7d\n          - name: html-files\t\t\t\u540d\u79f0\uff1ahtml-files\n            mountPath: \"\/usr\/share\/nginx\/html\"\t\t\u6302\u8f7d\u8def\u5f84\uff1a\/usr\/share\/nginx\/html\n#--------------------------------------------------\n      - name: busybox\n        image: registry.cn-hangzhou.aliyuncs.com\/acs\/busybox:v1.29.2\n        args:\n        - \/bin\/sh\n        - -c\n        - >\n           while :; do\n             if [ -f \/html\/index.html ];then\n               echo \"[$(date +%F\\ %T)] ${MY_POD_NAMESPACE}-${MY_POD_NAME}-${MY_POD_IP}\" > \/html\/index.html\n               sleep 1\n             else\n               touch \/html\/index.html\n             fi\n           done\n        env:\n          - name: TZ\n            value: Asia\/Shanghai\n          - name: MY_POD_NAME\n            valueFrom:\n              fieldRef:\n                apiVersion: v1\n                fieldPath: metadata.name\n          - name: MY_POD_NAMESPACE\n            valueFrom:\n              fieldRef:\n                apiVersion: v1\n                fieldPath: metadata.namespace\n          - name: MY_POD_IP\n            valueFrom:\n              fieldRef:\n                apiVersion: v1\n                fieldPath: status.podIP\n        volumeMounts:\n          - name: html-files\n            mountPath: \"\/html\"\n          - mountPath: \/etc\/localtime\n            name: tz-config\n\n#--------------------------------------------------\n      volumes:\n        - name: html-files\n          emptyDir:\n            medium: Memory\n            sizeLimit: 10Mi\n        - name: tz-config\n          hostPath:\n            path: \/usr\/share\/zoneinfo\/Asia\/Shanghai\n\n---<\/code><\/pre>\n\n\n\n
\u5341\u3001\u5e94\u7528nginx\u7684\u914d\u7f6e\u6587\u4ef6<\/h2>\n\n\n\n
[root@master1 ~]# kubectl apply -f nginx.yaml\t\t\u5e94\u7528nginx\u7684\u914d\u7f6e\u6587\u4ef6\nservice\/new-nginx created\nWarning: annotation \"kubernetes.io\/ingress.class\" is deprecated, please use 'spec.ingressClassName' instead\ningress.networking.k8s.io\/new-nginx created\ndeployment.apps\/new-nginx created\n[root@master1 ~]# kubectl get ingress\t\t\t\t\u67e5\u770bingress\nNAME        CLASS    HOSTS                                 ADDRESS   PORTS     AGE\nnew-nginx   <none>   benet.com,m.benet.com,www.benet.com \u5728\u914d\u7f6e\u6587\u4ef6\u5b9a\u4e49\u597d\u7684            80, 443   14s\n\u81ea\u5efahttps\u8bc1\u4e66\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
\u5341\u4e00\u3001\u751f\u6210\u8bc1\u4e66benet.key<\/h2>\n\n\n\n
[root@master1 ~]# openssl genrsa -out benet.key 2048\t\u751f\u6210\u8bc1\u4e66benet.key\n[root@master1 ~]#[root@master1 ~]# openssl req -new -x509 -key benet.key -out benet.csr -days 3650 -subj \/CN=*.benet.com\n\u6839\u636e\u79c1\u94a5benet.key\uff0c\u751f\u6210\u6cdb\u57df\u540d\u8bc1\u4e66\uff08\u4e09\u4e2a\u8bc1\u4e66\uff0cm.benet.com\uff0cwww.benet.com,m.benet.com\uff09\n\u65b0\u589e\u7684\u4e09\u4e2a\u57df\u540d\u8bc1\u4e66\u90fd\u53ef\u4ee5\u4f7f\u7528\u8fd9\u4e2a\u8bc1\u4e66\n[root@master1 ~]#\n[root@master1 ~]# ll\t\t\t\u67e5\u770b \u6587\u4ef6\u53ca\u76ee\u5f55\ntotal 953800\n-rw-r--r--  1 root root 139462656 Jun 26 14:53 aliyun-ingress-controller-v1.9.3.tar\n-rw-r--r--  1 root root     19309 Jun 26 14:57 aliyun-ingress-nginx.yaml\n-rw-------. 1 root root      1413 Feb 27 15:06 anaconda-ks.cfg\n-rw-r--r--  1 root root      1119 Jun 26 16:00 benet.csr\t\t\u8bc1\u4e66\n-rw-------  1 root root      1704 Jun 26 15:57 benet.key\t\t\u5bc6\u94a5\n-rw-r--r--  1 root root 548179968 Jun 24 09:37 calico.tar.gz\n-rw-r--r--  1 root root    244818 Jun 24 10:03 calico.yaml\n-rw-r--r--  1 root root      5444 Jun 24 08:25 kubeadm-init.log\n-rw-r--r--  1 root root      1106 Jun 24 08:24 kubeadm.yaml\n-rw-r--r--  1 root root 288751104 Jun 26 14:45 nginx-ingress-controller_v1.11.2.tar\n-rw-r--r--  1 root root      3644 Jun 26 15:55 nginx.yaml\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
\u5341\u4e8c\u3001\u67e5\u770bnew-nginx\u914d\u7f6e\u6587\u4ef6\u7684\u5185\u5bb9<\/h2>\n\n\n\n
[root@master1 ~]# kubectl get ingress new-nginx -o yaml\t\u67e5\u770bnew-nginx\u914d\u7f6e\u6587\u4ef6\u7684\u5185\u5bb9\uff08\u67e5\u770b\u751f\u6210\u6587\u4ef6\u521b\u5efa\u7684\u8fc7\u7a0b\uff09\nnginx.ingress.kubernetes.io\/configuration-snippet: |\n      if ($host != 'www.benet.com' ) {\n        rewrite ^ https:\/\/www.benet.com$request_uri permanent;\n ingress:\n    - ip: 10.111.132.159\n[root@master1 ~]#\n  tls:\n  - hosts:\n    - benet.com\t\t\t\t\u770b\u8fd9\u4e2a\n    - m.benet.com\n    - www.benet.com\n    secretName: benet-com-tls\nstatus:\t\t\t\t\t\t\n  loadBalancer:\t\u8d1f\u8f7d\u5747\u8861\n    ingress:\t\u8d1f\u8f7d\u5747\u8861\u4f7f\u7528ingress(\u53ef\u4ee5\u505a\u56db\u5c42\u7f51\u7edc\u5c42\u548c\u4e03\u5c42\u5e94\u7528\u5c42\u8d1f\u8f7d)\n    - ip: 10.101.102.78\t\t\u6709IP\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
[root@master1 ~]# kubectl get ingress\nNAME        CLASS    HOSTS                                 ADDRESS          PORTS     AG                                                  E\nnew-nginx   <none>   benet.com,m.benet.com,www.benet.com   10.111.132.159   80, 443   16                                                  m\n[root@master1 ~]#<\/code><\/pre>\n\n\n\n
\u5341\u4e09\u3001\u5efa\u7acb\u6620\u5c04\uff1a<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u5341\u56db\u3001\u6d4b\u8bd5\u9a8c\u8bc1\uff1a<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\"\"<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"
\u77e5\u8bc6\u70b9\uff1a \u6240\u6709\u8282\u70b9\u4e0a\u4f20nginx-ingress controller\u6587\u4ef6\uff1a \u4e00\u3001\u6240\u6709\u8282\u70b9\u90fd\u5bfc\u5165Nginx-i […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[152,2],"tags":[157],"class_list":["post-2082","post","type-post","status-publish","format-standard","hentry","category-k8s","category-linux","tag-ingress-nginx"],"_links":{"self":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts\/2082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2082"}],"version-history":[{"count":1,"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts\/2082\/revisions"}],"predecessor-version":[{"id":2096,"href":"http:\/\/113.45.254.23\/index.php?rest_route=\/wp\/v2\/posts\/2082\/revisions\/2096"}],"wp:attachment":[{"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2082"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2082"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/113.45.254.23\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}