devbox
天景科技苑
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

K8s集群搭建_kubectl get svc -a

作者：天景科技苑 | 2024-08-18 23:32:12

赞

踩

kubectl get svc -a

参考尚硅谷k8s部署过程

准备环境

角色IP
master192.168.1.11
node1192.168.1.12
node2192.168.1.13

三个节点都要设置 

  1. # 关闭防火墙
  2. systemctl stop firewalld
  3. systemctl disable firewalld
  4.  
  5. # 关闭selinux
  6. sed -i 's/enforcing/disabled/' /etc/selinux/config  # 永久
  7. setenforce 0  # 临时
  8.  
  9. # 关闭swap
  10. swapoff -a   # 临时
  11. sed -ri 's/.*swap.*/#&/' /etc/fstab    # 永久
  12.  
  13. # 根据规划设置主机名
  14. hostnamectl set-hostname <hostname>
  15.  
  16. # 在master添加hosts
  17. cat >> /etc/hosts << EOF
  18. 192.168.1.40 k8smaster
  19. 192.168.1.41 k8snode1
  20. 192.168.1.42 k8snode2
  21. EOF
  22.  
  23. # 将桥接的IPv4流量传递到iptables的链
  24. cat > /etc/sysctl.d/k8s.conf << EOF
  25. net.bridge.bridge-nf-call-ip6tables = 1
  26. net.bridge.bridge-nf-call-iptables = 1
  27. EOF
  28. sysctl --system  # 生效
  29.  
  30. # 时间同步
  31. yum install ntpdate -y
  32. ntpdate time.windows.com

安装Docker

三个节点都安装

  1. $ wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo -O /etc/yum.repos.d/docker-ce.repo
  2. $ yum -y install docker-ce-18.06.1.ce-3.el7
  3. $ systemctl enable docker && systemctl start docker
  4. $ docker --version
  5. Docker version 18.06.1-ce, build e68fc7a

设置阿里云镜像

  1. $ cat > /etc/docker/daemon.json << EOF
  2. {
  3.   "registry-mirrors": ["https://b9pmyelo.mirror.aliyuncs.com"]
  4. }
  5. EOF

添加阿里云YUM软件源

  1. $ cat > /etc/yum.repos.d/kubernetes.repo << EOF
  2. [kubernetes]
  3. name=Kubernetes
  4. baseurl=https://mirrors.aliyun.com/kubernetes/yum/repos/kubernetes-el7-x86_64
  5. enabled=1
  6. gpgcheck=0
  7. repo_gpgcheck=0
  8. gpgkey=https://mirrors.aliyun.com/kubernetes/yum/doc/yum-key.gpg https://mirrors.aliyun.com/kubernetes/yum/doc/rpm-package-key.gpg
  9. EOF

安装kubeadm，kubelet和kubectl

三个节点都安装

  1. $ yum install -y kubelet-1.18.0 kubeadm-1.18.0 kubectl-1.18.0
  2. $ systemctl enable kubelet

部署Kubernetes Master

在192.168.31.61（Master）执行。

  1. $ kubeadm init \
  2.   --apiserver-advertise-address=192.168.44.146 \
  3.   --image-repository registry.aliyuncs.com/google_containers \
  4.   --kubernetes-version v1.18.0 \
  5.   --service-cidr=10.96.0.0/12 \
  6.   --pod-network-cidr=10.244.0.0/16

安装成功

 master上执行

  1. mkdir -p $HOME/.kube
  2. sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  3. sudo chown $(id -u):$(id -g) $HOME/.kube/config
  4. $ kubectl get nodes

 安装网络组件calico

curl -k https://docs.projectcalico.org/manifests/calico.yaml -O
curl https://docs.projectcalico.org/manifests/calico.yaml -O下载完成后会出现一个文件

编辑文件修改 为10.244.0.0/16

然后apply一下

kubectl apply -f calico.yaml

加入其他节点

  1. $ kubeadm join 192.168.1.11:6443 --token esce21.q6hetwm8si29qxwn \
  2.     --discovery-token-ca-cert-hash sha256:00603a05805807501d7181c3d60b478788408cfe6cedefedb1f97569708be9c5

成功加入

 测试kubernetes集群

在Kubernetes集群中创建一个pod，验证是否正常运行：

  1. $ kubectl create deployment nginx --image=nginx
  2. $ kubectl expose deployment nginx --port=80 --type=NodePort
  3. $ kubectl get pod,svc

 访问地址：http://NodeIP:Port  

成功访问

部署dashboard

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v2.0.0/aio/deploy/recommended.yaml

下载不下来的话就新建一个yaml文件，将内容复制到其中；

设置访问端口

kubectl edit svc kubernetes-dashboard -n kubernetes-dashboard

  1. kubectl get svc -A |grep kubernetes-dashboard
  2. ## 找到端口，在安全组放行

 访问： https://集群任意IP:端口 https://139.198.165.238:30000

创建访问账号

新建dash.yaml

  1. #创建访问账号，准备一个yaml文件； vi dash.yaml
  2. apiVersion: v1
  3. kind: ServiceAccount
  4. metadata:
  5.   name: admin-user
  6.   namespace: kubernetes-dashboard
  7. ---
  8. apiVersion: rbac.authorization.k8s.io/v1
  9. kind: ClusterRoleBinding
  10. metadata:
  11.   name: admin-user
  12. roleRef:
  13.   apiGroup: rbac.authorization.k8s.io
  14.   kind: ClusterRole
  15.   name: cluster-admin
  16. subjects:
  17. - kind: ServiceAccount
  18.   name: admin-user
  19.   namespace: kubernetes-dashboard
kubectl apply -f dash.yaml

获取访问令牌

  1. #获取访问令牌
  2. kubectl -n kubernetes-dashboard get secret $(kubectl -n kubernetes-dashboard get sa/admin-user -o jsonpath="{.secrets[0].name}") -o go-template="{{.data.token | base64decode}}"

输入到网页中

成功访问

多副本

kubectl create deployment my-dep --image=nginx --replicas=3

service 

kubectl expose deployment my-dep --port=8000 --target-port=80 --type=NodePort

8000为k8s集群内部访问接口，集群外部访问pod所在节点的ip+30441端口

 查看每个pod的ip

kubectl get pod -owide

查看service的ip

 初始化主节点时设置的pod和service的IP范围

安装ingress 

vi ingress.yaml

复制下面的内容

  1. apiVersion: v1
  2. kind: Namespace
  3. metadata:
  4.   name: ingress-nginx
  5.   labels:
  6.     app.kubernetes.io/name: ingress-nginx
  7.     app.kubernetes.io/instance: ingress-nginx
  8.  
  9. ---
  10. # Source: ingress-nginx/templates/controller-serviceaccount.yaml
  11. apiVersion: v1
  12. kind: ServiceAccount
  13. metadata:
  14.   labels:
  15.     helm.sh/chart: ingress-nginx-3.33.0
  16.     app.kubernetes.io/name: ingress-nginx
  17.     app.kubernetes.io/instance: ingress-nginx
  18.     app.kubernetes.io/version: 0.47.0
  19.     app.kubernetes.io/managed-by: Helm
  20.     app.kubernetes.io/component: controller
  21.   name: ingress-nginx
  22.   namespace: ingress-nginx
  23. automountServiceAccountToken: true
  24. ---
  25. # Source: ingress-nginx/templates/controller-configmap.yaml
  26. apiVersion: v1
  27. kind: ConfigMap
  28. metadata:
  29.   labels:
  30.     helm.sh/chart: ingress-nginx-3.33.0
  31.     app.kubernetes.io/name: ingress-nginx
  32.     app.kubernetes.io/instance: ingress-nginx
  33.     app.kubernetes.io/version: 0.47.0
  34.     app.kubernetes.io/managed-by: Helm
  35.     app.kubernetes.io/component: controller
  36.   name: ingress-nginx-controller
  37.   namespace: ingress-nginx
  38. data:
  39. ---
  40. # Source: ingress-nginx/templates/clusterrole.yaml
  41. apiVersion: rbac.authorization.k8s.io/v1
  42. kind: ClusterRole
  43. metadata:
  44.   labels:
  45.     helm.sh/chart: ingress-nginx-3.33.0
  46.     app.kubernetes.io/name: ingress-nginx
  47.     app.kubernetes.io/instance: ingress-nginx
  48.     app.kubernetes.io/version: 0.47.0
  49.     app.kubernetes.io/managed-by: Helm
  50.   name: ingress-nginx
  51. rules:
  52.   - apiGroups:
  53.       - ''
  54.     resources:
  55.       - configmaps
  56.       - endpoints
  57.       - nodes
  58.       - pods
  59.       - secrets
  60.     verbs:
  61.       - list
  62.       - watch
  63.   - apiGroups:
  64.       - ''
  65.     resources:
  66.       - nodes
  67.     verbs:
  68.       - get
  69.   - apiGroups:
  70.       - ''
  71.     resources:
  72.       - services
  73.     verbs:
  74.       - get
  75.       - list
  76.       - watch
  77.   - apiGroups:
  78.       - extensions
  79.       - networking.k8s.io   # k8s 1.14+
  80.     resources:
  81.       - ingresses
  82.     verbs:
  83.       - get
  84.       - list
  85.       - watch
  86.   - apiGroups:
  87.       - ''
  88.     resources:
  89.       - events
  90.     verbs:
  91.       - create
  92.       - patch
  93.   - apiGroups:
  94.       - extensions
  95.       - networking.k8s.io   # k8s 1.14+
  96.     resources:
  97.       - ingresses/status
  98.     verbs:
  99.       - update
  100.   - apiGroups:
  101.       - networking.k8s.io   # k8s 1.14+
  102.     resources:
  103.       - ingressclasses
  104.     verbs:
  105.       - get
  106.       - list
  107.       - watch
  108. ---
  109. # Source: ingress-nginx/templates/clusterrolebinding.yaml
  110. apiVersion: rbac.authorization.k8s.io/v1
  111. kind: ClusterRoleBinding
  112. metadata:
  113.   labels:
  114.     helm.sh/chart: ingress-nginx-3.33.0
  115.     app.kubernetes.io/name: ingress-nginx
  116.     app.kubernetes.io/instance: ingress-nginx
  117.     app.kubernetes.io/version: 0.47.0
  118.     app.kubernetes.io/managed-by: Helm
  119.   name: ingress-nginx
  120. roleRef:
  121.   apiGroup: rbac.authorization.k8s.io
  122.   kind: ClusterRole
  123.   name: ingress-nginx
  124. subjects:
  125.   - kind: ServiceAccount
  126.     name: ingress-nginx
  127.     namespace: ingress-nginx
  128. ---
  129. # Source: ingress-nginx/templates/controller-role.yaml
  130. apiVersion: rbac.authorization.k8s.io/v1
  131. kind: Role
  132. metadata:
  133.   labels:
  134.     helm.sh/chart: ingress-nginx-3.33.0
  135.     app.kubernetes.io/name: ingress-nginx
  136.     app.kubernetes.io/instance: ingress-nginx
  137.     app.kubernetes.io/version: 0.47.0
  138.     app.kubernetes.io/managed-by: Helm
  139.     app.kubernetes.io/component: controller
  140.   name: ingress-nginx
  141.   namespace: ingress-nginx
  142. rules:
  143.   - apiGroups:
  144.       - ''
  145.     resources:
  146.       - namespaces
  147.     verbs:
  148.       - get
  149.   - apiGroups:
  150.       - ''
  151.     resources:
  152.       - configmaps
  153.       - pods
  154.       - secrets
  155.       - endpoints
  156.     verbs:
  157.       - get
  158.       - list
  159.       - watch
  160.   - apiGroups:
  161.       - ''
  162.     resources:
  163.       - services
  164.     verbs:
  165.       - get
  166.       - list
  167.       - watch
  168.   - apiGroups:
  169.       - extensions
  170.       - networking.k8s.io   # k8s 1.14+
  171.     resources:
  172.       - ingresses
  173.     verbs:
  174.       - get
  175.       - list
  176.       - watch
  177.   - apiGroups:
  178.       - extensions
  179.       - networking.k8s.io   # k8s 1.14+
  180.     resources:
  181.       - ingresses/status
  182.     verbs:
  183.       - update
  184.   - apiGroups:
  185.       - networking.k8s.io   # k8s 1.14+
  186.     resources:
  187.       - ingressclasses
  188.     verbs:
  189.       - get
  190.       - list
  191.       - watch
  192.   - apiGroups:
  193.       - ''
  194.     resources:
  195.       - configmaps
  196.     resourceNames:
  197.       - ingress-controller-leader-nginx
  198.     verbs:
  199.       - get
  200.       - update
  201.   - apiGroups:
  202.       - ''
  203.     resources:
  204.       - configmaps
  205.     verbs:
  206.       - create
  207.   - apiGroups:
  208.       - ''
  209.     resources:
  210.       - events
  211.     verbs:
  212.       - create
  213.       - patch
  214. ---
  215. # Source: ingress-nginx/templates/controller-rolebinding.yaml
  216. apiVersion: rbac.authorization.k8s.io/v1
  217. kind: RoleBinding
  218. metadata:
  219.   labels:
  220.     helm.sh/chart: ingress-nginx-3.33.0
  221.     app.kubernetes.io/name: ingress-nginx
  222.     app.kubernetes.io/instance: ingress-nginx
  223.     app.kubernetes.io/version: 0.47.0
  224.     app.kubernetes.io/managed-by: Helm
  225.     app.kubernetes.io/component: controller
  226.   name: ingress-nginx
  227.   namespace: ingress-nginx
  228. roleRef:
  229.   apiGroup: rbac.authorization.k8s.io
  230.   kind: Role
  231.   name: ingress-nginx
  232. subjects:
  233.   - kind: ServiceAccount
  234.     name: ingress-nginx
  235.     namespace: ingress-nginx
  236. ---
  237. # Source: ingress-nginx/templates/controller-service-webhook.yaml
  238. apiVersion: v1
  239. kind: Service
  240. metadata:
  241.   labels:
  242.     helm.sh/chart: ingress-nginx-3.33.0
  243.     app.kubernetes.io/name: ingress-nginx
  244.     app.kubernetes.io/instance: ingress-nginx
  245.     app.kubernetes.io/version: 0.47.0
  246.     app.kubernetes.io/managed-by: Helm
  247.     app.kubernetes.io/component: controller
  248.   name: ingress-nginx-controller-admission
  249.   namespace: ingress-nginx
  250. spec:
  251.   type: ClusterIP
  252.   ports:
  253.     - name: https-webhook
  254.       port: 443
  255.       targetPort: webhook
  256.   selector:
  257.     app.kubernetes.io/name: ingress-nginx
  258.     app.kubernetes.io/instance: ingress-nginx
  259.     app.kubernetes.io/component: controller
  260. ---
  261. # Source: ingress-nginx/templates/controller-service.yaml
  262. apiVersion: v1
  263. kind: Service
  264. metadata:
  265.   annotations:
  266.   labels:
  267.     helm.sh/chart: ingress-nginx-3.33.0
  268.     app.kubernetes.io/name: ingress-nginx
  269.     app.kubernetes.io/instance: ingress-nginx
  270.     app.kubernetes.io/version: 0.47.0
  271.     app.kubernetes.io/managed-by: Helm
  272.     app.kubernetes.io/component: controller
  273.   name: ingress-nginx-controller
  274.   namespace: ingress-nginx
  275. spec:
  276.   type: NodePort
  277.   ports:
  278.     - name: http
  279.       port: 80
  280.       protocol: TCP
  281.       targetPort: http
  282.     - name: https
  283.       port: 443
  284.       protocol: TCP
  285.       targetPort: https
  286.   selector:
  287.     app.kubernetes.io/name: ingress-nginx
  288.     app.kubernetes.io/instance: ingress-nginx
  289.     app.kubernetes.io/component: controller
  290. ---
  291. # Source: ingress-nginx/templates/controller-deployment.yaml
  292. apiVersion: apps/v1
  293. kind: Deployment
  294. metadata:
  295.   labels:
  296.     helm.sh/chart: ingress-nginx-3.33.0
  297.     app.kubernetes.io/name: ingress-nginx
  298.     app.kubernetes.io/instance: ingress-nginx
  299.     app.kubernetes.io/version: 0.47.0
  300.     app.kubernetes.io/managed-by: Helm
  301.     app.kubernetes.io/component: controller
  302.   name: ingress-nginx-controller
  303.   namespace: ingress-nginx
  304. spec:
  305.   selector:
  306.     matchLabels:
  307.       app.kubernetes.io/name: ingress-nginx
  308.       app.kubernetes.io/instance: ingress-nginx
  309.       app.kubernetes.io/component: controller
  310.   revisionHistoryLimit: 10
  311.   minReadySeconds: 0
  312.   template:
  313.     metadata:
  314.       labels:
  315.         app.kubernetes.io/name: ingress-nginx
  316.         app.kubernetes.io/instance: ingress-nginx
  317.         app.kubernetes.io/component: controller
  318.     spec:
  319.       dnsPolicy: ClusterFirst
  320.       containers:
  321.         - name: controller
  322.           image: registry.cn-hangzhou.aliyuncs.com/lfy_k8s_images/ingress-nginx-controller:v0.46.0
  323.           imagePullPolicy: IfNotPresent
  324.           lifecycle:
  325.             preStop:
  326.               exec:
  327.                 command:
  328.                   - /wait-shutdown
  329.           args:
  330.             - /nginx-ingress-controller
  331.             - --election-id=ingress-controller-leader
  332.             - --ingress-class=nginx
  333.             - --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
  334.             - --validating-webhook=:8443
  335.             - --validating-webhook-certificate=/usr/local/certificates/cert
  336.             - --validating-webhook-key=/usr/local/certificates/key
  337.           securityContext:
  338.             capabilities:
  339.               drop:
  340.                 - ALL
  341.               add:
  342.                 - NET_BIND_SERVICE
  343.             runAsUser: 101
  344.             allowPrivilegeEscalation: true
  345.           env:
  346.             - name: POD_NAME
  347.               valueFrom:
  348.                 fieldRef:
  349.                   fieldPath: metadata.name
  350.             - name: POD_NAMESPACE
  351.               valueFrom:
  352.                 fieldRef:
  353.                   fieldPath: metadata.namespace
  354.             - name: LD_PRELOAD
  355.               value: /usr/local/lib/libmimalloc.so
  356.           livenessProbe:
  357.             failureThreshold: 5
  358.             httpGet:
  359.               path: /healthz
  360.               port: 10254
  361.               scheme: HTTP
  362.             initialDelaySeconds: 10
  363.             periodSeconds: 10
  364.             successThreshold: 1
  365.             timeoutSeconds: 1
  366.           readinessProbe:
  367.             failureThreshold: 3
  368.             httpGet:
  369.               path: /healthz
  370.               port: 10254
  371.               scheme: HTTP
  372.             initialDelaySeconds: 10
  373.             periodSeconds: 10
  374.             successThreshold: 1
  375.             timeoutSeconds: 1
  376.           ports:
  377.             - name: http
  378.               containerPort: 80
  379.               protocol: TCP
  380.             - name: https
  381.               containerPort: 443
  382.               protocol: TCP
  383.             - name: webhook
  384.               containerPort: 8443
  385.               protocol: TCP
  386.           volumeMounts:
  387.             - name: webhook-cert
  388.               mountPath: /usr/local/certificates/
  389.               readOnly: true
  390.           resources:
  391.             requests:
  392.               cpu: 100m
  393.               memory: 90Mi
  394.       nodeSelector:
  395.         kubernetes.io/os: linux
  396.       serviceAccountName: ingress-nginx
  397.       terminationGracePeriodSeconds: 300
  398.       volumes:
  399.         - name: webhook-cert
  400.           secret:
  401.             secretName: ingress-nginx-admission
  402. ---
  403. # Source: ingress-nginx/templates/admission-webhooks/validating-webhook.yaml
  404. # before changing this value, check the required kubernetes version
  405. # https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#prerequisites
  406. apiVersion: admissionregistration.k8s.io/v1
  407. kind: ValidatingWebhookConfiguration
  408. metadata:
  409.   labels:
  410.     helm.sh/chart: ingress-nginx-3.33.0
  411.     app.kubernetes.io/name: ingress-nginx
  412.     app.kubernetes.io/instance: ingress-nginx
  413.     app.kubernetes.io/version: 0.47.0
  414.     app.kubernetes.io/managed-by: Helm
  415.     app.kubernetes.io/component: admission-webhook
  416.   name: ingress-nginx-admission
  417. webhooks:
  418.   - name: validate.nginx.ingress.kubernetes.io
  419.     matchPolicy: Equivalent
  420.     rules:
  421.       - apiGroups:
  422.           - networking.k8s.io
  423.         apiVersions:
  424.           - v1beta1
  425.         operations:
  426.           - CREATE
  427.           - UPDATE
  428.         resources:
  429.           - ingresses
  430.     failurePolicy: Fail
  431.     sideEffects: None
  432.     admissionReviewVersions:
  433.       - v1
  434.       - v1beta1
  435.     clientConfig:
  436.       service:
  437.         namespace: ingress-nginx
  438.         name: ingress-nginx-controller-admission
  439.         path: /networking/v1beta1/ingresses
  440. ---
  441. # Source: ingress-nginx/templates/admission-webhooks/job-patch/serviceaccount.yaml
  442. apiVersion: v1
  443. kind: ServiceAccount
  444. metadata:
  445.   name: ingress-nginx-admission
  446.   annotations:
  447.     helm.sh/hook: pre-install,pre-upgrade,post-install,post-upgrade
  448.     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  449.   labels:
  450.     helm.sh/chart: ingress-nginx-3.33.0
  451.     app.kubernetes.io/name: ingress-nginx
  452.     app.kubernetes.io/instance: ingress-nginx
  453.     app.kubernetes.io/version: 0.47.0
  454.     app.kubernetes.io/managed-by: Helm
  455.     app.kubernetes.io/component: admission-webhook
  456.   namespace: ingress-nginx
  457. ---
  458. # Source: ingress-nginx/templates/admission-webhooks/job-patch/clusterrole.yaml
  459. apiVersion: rbac.authorization.k8s.io/v1
  460. kind: ClusterRole
  461. metadata:
  462.   name: ingress-nginx-admission
  463.   annotations:
  464.     helm.sh/hook: pre-install,pre-upgrade,post-install,post-upgrade
  465.     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  466.   labels:
  467.     helm.sh/chart: ingress-nginx-3.33.0
  468.     app.kubernetes.io/name: ingress-nginx
  469.     app.kubernetes.io/instance: ingress-nginx
  470.     app.kubernetes.io/version: 0.47.0
  471.     app.kubernetes.io/managed-by: Helm
  472.     app.kubernetes.io/component: admission-webhook
  473. rules:
  474.   - apiGroups:
  475.       - admissionregistration.k8s.io
  476.     resources:
  477.       - validatingwebhookconfigurations
  478.     verbs:
  479.       - get
  480.       - update
  481. ---
  482. # Source: ingress-nginx/templates/admission-webhooks/job-patch/clusterrolebinding.yaml
  483. apiVersion: rbac.authorization.k8s.io/v1
  484. kind: ClusterRoleBinding
  485. metadata:
  486.   name: ingress-nginx-admission
  487.   annotations:
  488.     helm.sh/hook: pre-install,pre-upgrade,post-install,post-upgrade
  489.     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  490.   labels:
  491.     helm.sh/chart: ingress-nginx-3.33.0
  492.     app.kubernetes.io/name: ingress-nginx
  493.     app.kubernetes.io/instance: ingress-nginx
  494.     app.kubernetes.io/version: 0.47.0
  495.     app.kubernetes.io/managed-by: Helm
  496.     app.kubernetes.io/component: admission-webhook
  497. roleRef:
  498.   apiGroup: rbac.authorization.k8s.io
  499.   kind: ClusterRole
  500.   name: ingress-nginx-admission
  501. subjects:
  502.   - kind: ServiceAccount
  503.     name: ingress-nginx-admission
  504.     namespace: ingress-nginx
  505. ---
  506. # Source: ingress-nginx/templates/admission-webhooks/job-patch/role.yaml
  507. apiVersion: rbac.authorization.k8s.io/v1
  508. kind: Role
  509. metadata:
  510.   name: ingress-nginx-admission
  511.   annotations:
  512.     helm.sh/hook: pre-install,pre-upgrade,post-install,post-upgrade
  513.     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  514.   labels:
  515.     helm.sh/chart: ingress-nginx-3.33.0
  516.     app.kubernetes.io/name: ingress-nginx
  517.     app.kubernetes.io/instance: ingress-nginx
  518.     app.kubernetes.io/version: 0.47.0
  519.     app.kubernetes.io/managed-by: Helm
  520.     app.kubernetes.io/component: admission-webhook
  521.   namespace: ingress-nginx
  522. rules:
  523.   - apiGroups:
  524.       - ''
  525.     resources:
  526.       - secrets
  527.     verbs:
  528.       - get
  529.       - create
  530. ---
  531. # Source: ingress-nginx/templates/admission-webhooks/job-patch/rolebinding.yaml
  532. apiVersion: rbac.authorization.k8s.io/v1
  533. kind: RoleBinding
  534. metadata:
  535.   name: ingress-nginx-admission
  536.   annotations:
  537.     helm.sh/hook: pre-install,pre-upgrade,post-install,post-upgrade
  538.     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  539.   labels:
  540.     helm.sh/chart: ingress-nginx-3.33.0
  541.     app.kubernetes.io/name: ingress-nginx
  542.     app.kubernetes.io/instance: ingress-nginx
  543.     app.kubernetes.io/version: 0.47.0
  544.     app.kubernetes.io/managed-by: Helm
  545.     app.kubernetes.io/component: admission-webhook
  546.   namespace: ingress-nginx
  547. roleRef:
  548.   apiGroup: rbac.authorization.k8s.io
  549.   kind: Role
  550.   name: ingress-nginx-admission
  551. subjects:
  552.   - kind: ServiceAccount
  553.     name: ingress-nginx-admission
  554.     namespace: ingress-nginx
  555. ---
  556. # Source: ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml
  557. apiVersion: batch/v1
  558. kind: Job
  559. metadata:
  560.   name: ingress-nginx-admission-create
  561.   annotations:
  562.     helm.sh/hook: pre-install,pre-upgrade
  563.     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  564.   labels:
  565.     helm.sh/chart: ingress-nginx-3.33.0
  566.     app.kubernetes.io/name: ingress-nginx
  567.     app.kubernetes.io/instance: ingress-nginx
  568.     app.kubernetes.io/version: 0.47.0
  569.     app.kubernetes.io/managed-by: Helm
  570.     app.kubernetes.io/component: admission-webhook
  571.   namespace: ingress-nginx
  572. spec:
  573.   template:
  574.     metadata:
  575.       name: ingress-nginx-admission-create
  576.       labels:
  577.         helm.sh/chart: ingress-nginx-3.33.0
  578.         app.kubernetes.io/name: ingress-nginx
  579.         app.kubernetes.io/instance: ingress-nginx
  580.         app.kubernetes.io/version: 0.47.0
  581.         app.kubernetes.io/managed-by: Helm
  582.         app.kubernetes.io/component: admission-webhook
  583.     spec:
  584.       containers:
  585.         - name: create
  586.           image: docker.io/jettech/kube-webhook-certgen:v1.5.1
  587.           imagePullPolicy: IfNotPresent
  588.           args:
  589.             - create
  590.             - --host=ingress-nginx-controller-admission,ingress-nginx-controller-admission.$(POD_NAMESPACE).svc
  591.             - --namespace=$(POD_NAMESPACE)
  592.             - --secret-name=ingress-nginx-admission
  593.           env:
  594.             - name: POD_NAMESPACE
  595.               valueFrom:
  596.                 fieldRef:
  597.                   fieldPath: metadata.namespace
  598.       restartPolicy: OnFailure
  599.       serviceAccountName: ingress-nginx-admission
  600.       securityContext:
  601.         runAsNonRoot: true
  602.         runAsUser: 2000
  603. ---
  604. # Source: ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml
  605. apiVersion: batch/v1
  606. kind: Job
  607. metadata:
  608.   name: ingress-nginx-admission-patch
  609.   annotations:
  610.     helm.sh/hook: post-install,post-upgrade
  611.     helm.sh/hook-delete-policy: before-hook-creation,hook-succeeded
  612.   labels:
  613.     helm.sh/chart: ingress-nginx-3.33.0
  614.     app.kubernetes.io/name: ingress-nginx
  615.     app.kubernetes.io/instance: ingress-nginx
  616.     app.kubernetes.io/version: 0.47.0
  617.     app.kubernetes.io/managed-by: Helm
  618.     app.kubernetes.io/component: admission-webhook
  619.   namespace: ingress-nginx
  620. spec:
  621.   template:
  622.     metadata:
  623.       name: ingress-nginx-admission-patch
  624.       labels:
  625.         helm.sh/chart: ingress-nginx-3.33.0
  626.         app.kubernetes.io/name: ingress-nginx
  627.         app.kubernetes.io/instance: ingress-nginx
  628.         app.kubernetes.io/version: 0.47.0
  629.         app.kubernetes.io/managed-by: Helm
  630.         app.kubernetes.io/component: admission-webhook
  631.     spec:
  632.       containers:
  633.         - name: patch
  634.           image: docker.io/jettech/kube-webhook-certgen:v1.5.1
  635.           imagePullPolicy: IfNotPresent
  636.           args:
  637.             - patch
  638.             - --webhook-name=ingress-nginx-admission
  639.             - --namespace=$(POD_NAMESPACE)
  640.             - --patch-mutating=false
  641.             - --secret-name=ingress-nginx-admission
  642.             - --patch-failure-policy=Fail
  643.           env:
  644.             - name: POD_NAMESPACE
  645.               valueFrom:
  646.                 fieldRef:
  647.                   fieldPath: metadata.namespace
  648.       restartPolicy: OnFailure
  649.       serviceAccountName: ingress-nginx-admission
  650.       securityContext:
  651.         runAsNonRoot: true
  652.         runAsUser: 2000
kubectl apply -f ingress.yaml

安装成功

 向外暴露的端口

 

配置ingress规则的时候的坑

教程中为,k8s版本为1.20.9

  1. apiVersion: networking.k8s.io/v1
  2. kind: Ingress  
  3. metadata:
  4.   name: ingress-host-bar
  5. spec:
  6.   ingressClassName: nginx
  7.   rules:
  8.   - host: "hello.atguigu.com"
  9.     http:
  10.       paths:
  11.       - pathType: Prefix
  12.         path: "/"
  13.         backend:
  14.           service:
  15.             name: hello-server
  16.             port:
  17.               number: 8000
  18.   - host: "demo.atguigu.com"
  19.     http:
  20.       paths:
  21.       - pathType: Prefix
  22.         path: "/nginx"  # 把请求会转给下面的服务，下面的服务一定要能处理这个路径，不能处理就是404
  23.         backend:
  24.           service:
  25.             name: nginx-demo  ## java，比如使用路径重写，去掉前缀nginx
  26.             port:
  27.               number: 8000

我安装的版本为1.8 ，写法上有些区别

  1. apiVersion: extensions/v1beta1
  2. kind: Ingress
  3. metadata:
  4.   name: example-ingress
  5.   annotations:
  6.     nginx.ingress.kubernetes.io/rewrite-target: /
  7. spec:
  8.  rules:
  9.  - host: hello.atguigu.com
  10.    http:
  11.      paths:
  12.      - path: /*
  13.        backend:
  14.          serviceName: hello-server
  15.          servicePort: 8000
wAAACH5BAEKAAAALAAAAAABAAEAAAICRAEAOw==

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/天景科技苑/article/detail/999717
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号