8. 部署ingress-nginx代理

# 使用yaml部署

参考地址
https://github.com/kubernetes/ingress-nginx
https://kubernetes.github.io/ingress-nginx/

下载文件
>注意ingress版本要与k8s版本匹配，可在github仓库中查看ingress与k8s对于的版本关系列表。

![](/media/202406/2024-06-08_113219_3503840.6763222613607454.png)

本实验中k8s集群版本为1.27.4，因此部署1.8.1版本的ingress-nginx

```
wget https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.8.1/deploy/static/provider/cloud/deploy.yaml

# v1.6.4版本，适用于kuberneters v1.23版本
wget https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.6.4/deploy/static/provider/cloud/deploy.yaml
```

修改资源清单配置
```
# vim deploy.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app.kubernetes.io/component: controller
    app.kubernetes.io/instance: ingress-nginx
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/part-of: ingress-nginx
    app.kubernetes.io/version: 1.8.1
  name: ingress-nginx-controller
  namespace: ingress-nginx
spec:
  minReadySeconds: 0
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app.kubernetes.io/component: controller
      app.kubernetes.io/instance: ingress-nginx
      app.kubernetes.io/name: ingress-nginx
  template:
    metadata:
      labels:
        app.kubernetes.io/component: controller
        app.kubernetes.io/instance: ingress-nginx
        app.kubernetes.io/name: ingress-nginx
        app.kubernetes.io/part-of: ingress-nginx
        app.kubernetes.io/version: 1.8.1
    spec:
      hostNetwork: true                        # 新增。开启host网络，提高网络入口的网络性能
      nodeSelector:                            # 设置node筛选器，在特定label的节点上启动
        IngressProxy: "true"                   # 修改。调度至IngressProxy: "true"的节点
      tolerations:           				  # 新增，明确声明容忍Pod被部署到有Master污点的节点上
      - key: "node-role.kubernetes.io/master"
        operator: Exists
        effect: "NoSchedule"
      - key: "node-role.kubernetes.io/control-plane"
        operator: Exists
        effect: "NoSchedule"
# 去除镜像sha256信息
image: registry.k8s.io/ingress-nginx/controller:v1.8.1 
image: registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407
```

![](/media/202407/2024-07-10_180700_5962710.7548326441462364.png)

![](/media/202407/2024-07-10_171549_3336600.5046490107039039.png)

创建资源
给master节点设置标签，充当边缘节点
```
kubectl label nodes k8s-master IngressProxy=true

kubectl apply -f deploy.yaml
```

查看资源信息
```
kubectl get pod -n ingress-nginx -o wide

kubectl get svc -n ingress-nginx

```

# 使用helm部署

创建ingress名称空间
```
kubectl create namespace ingress
```

添加仓库
```
helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
```

部署ingress
```
helm install my-release ingress-nginx/ingress-nginx --namespace ingress
```

查看验证
```
kubectl get pod -n ingress 
kubectl get svc -n ingress
```

# 访问测试

创建资源
```
[root@k8s-master ~]# cat ingress-test.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: test-ingress-deployemt # 指定Deployment名称
spec:
  replicas: 2 # 副本数
  selector:
    matchLabels: # 选择器指定Deployment需要管理对应标签的容器
      app: my-nginx
  template:
    metadata:
      labels:
        app: my-nginx # 指定容器的标签
    spec:
      containers:
        - name: test-ingress-container
          image: nginx:latest
          ports:
            - containerPort: 80 # 指定容器内监听的端口
              name: http
          resources: # 指定允许容器请求的资源范围
            limits:
              cpu: 20m
              memory: 50Mi
            requests:
              cpu: 10m
              memory: 20Mi
---
apiVersion: v1
kind: Service
metadata:
  name: test-ingress-service # 指定服务名称
spec:
  selector:
    app: my-nginx # 选择器指定需要暴露对应标签的Pod端口
  ports:
    - port: 11080  # Service需要对外暴露的端口
      targetPort: 80  # Service需要暴露的内部端口
  type: ClusterIP # 指定服务类型，ClusterIP表示用于在集群内部暴露服务。
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: test-ingress-ingress # 指定ingress服务名
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /  # 重定向
spec:
  ingressClassName: nginx # 指定 Ingress 资源所使用Nginx的 Ingress Controller 类型,其他还有Traefik
  rules:
    - host: my-nginx.local.com # 指定外部访问主机名
      http:
        paths:
          - path: /my-nginx
            pathType: Prefix
            backend:  # 指定请求回源到后端Service
              service:
                name: test-ingress-service
                port:
                  number: 11080 # Service 暴露的端口
```

修改hosts
```
192.168.10.10 my-nginx.local.com
```

访问测试

![](/media/202407/2024-07-10_184718_6903300.7153320034647646.png)