1、搭建ingress服务环境（安装ingress-controller控制器）--这里使用nginx做负载均衡
1、创建文件：·mkdir /opt/ingress·cd /opt/ingress
2、获取ingress-nginx和ingress控制器的yaml文件：##创建ingress-controller控制器的yaml文件·wget https://github.com/kubernetes/ingress-nginx/blob/nginx-0.30.0/deploy/static/mandatory.yaml ##创建 ingress-nginx服务的yaml文件·wget https://github.com/kubernetes/ingress-nginx/blob/nginx-0.30.0/deploy/static/provider/baremetal/service-nodeport.yaml
3、去到ingress目录下修改镜像仓库地址：·vim /opt/ingress/mandatory.yaml------------------------------------------------------------------------------------搜/image#将：image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0#改为国内仓库：image: quay-mirror.qiniu.com/kubernetes-ingress-controller/nginx-ingress-controller:0.30.0#@如果国内镜像不行直接用国外镜像下载#@注意使用 kubectl describe pods -n ingress-nginx 查看pod的下载启动情况#@更换镜像后、先把yaml创建的pod和service删除：kubectl delete -f ./#@再创建------------------------------------------------------------------------------------------------------------------
4、执行yaml文件：·cd /opt/ingress·kubectl apply -f ./
5、查看pod状态：·kubectl get pods -n ingress-nginx----------------------------------------------------------------------------------------NAME READY STATUS RESTARTS AGEnginx-ingress-controller-7f74f657bd-97jbm 1/1 Running 0 12m#只有READY 是1/1时pod才是正常运行状态-----------------------------------------------------------------------------------------
6、查看service状态： #重点是这个服务（起到外部访问内部集群的作用、外部访问内部的集群通过这个ingress-nginx服务的端口来访问的）·kubectl get service -n ingress-nginx-----------------------------------------------------------------------------------------------NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEingress-nginx NodePort 10.97.145.253 <none> 80:30090/TCP,443:32457/TCP 13m#这里service的类型是NodePort的#80是http的端口#443是https的端口------------------------------------------------------------------------------------------------2、准备service和pod
·创建如下图架构
2、创建tomcat-nginx.yaml
1、创建dev空间：kubectl create ns dev
2、vim tomcat-nginx.yaml
---------------------------------------------------------------
#创建两个deployment控制器和6个pod、两个serviceapiVersion: apps/v1
kind: Deployment
metadata:name: nginx-deploymentnamespace: devspec:replicas: 3selector:matchLabels:app: nginx-podtemplate:metadata:labels:app: nginx-podspec:containers:- name: nginximage: nginx:1.17.1ports:- containerPort: 80---apiVersion: apps/v1
kind: Deployment
metadata:name: tomcat-deploymentnamespace: devspec:replicas: 3selector:matchLabels:app: tomcat-podtemplate:metadata:labels:app: tomcat-podspec:containers:- name: tomcatimage: tomcat:8.5-jre10-slimports:- containerPort: 8080---apiVersion: v1
kind: Service
metadata:name: nginx-servicenamespace: devspec:selector:app: nginx-podclusterIP: Nonetype: ClusterIP ports:- port: 80targetPort: 80---apiVersion: v1
kind: Service
metadata:name: tomcat-servicenamespace: devspec:selector:app: tomcat-podclusterIP: None type: ClusterIP #集群内部访问的service类型ports:- port: 8080targetPort: 8080-------------------------------------------------------------------------------------3、创建deploy、pod、service：kubectl apply -f tomcat-nginx.yaml
4、查询service、pod、deploy的状态：·kubectl get deployment,pods,svc -ndev -owide------------------------------------------------------------------------------------------------NAME READY UP-TO-DATE AVAILABLE AGE CONTAINERS IMAGES SELECTORdeployment.apps/nginx-deployment 3/3 3 3 2m24s nginx nginx:1.17.1 app=nginx-poddeployment.apps/tomcat-deployment 3/3 3 3 2m24s tomcat tomcat:8.5-jre10-slim app=tomcat-podNAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATESpod/nginx-deployment-6696798b78-g489b 1/1 Running 0 2m24s 10.244.1.7 node-1 <none> <none>pod/nginx-deployment-6696798b78-m2b9r 1/1 Running 0 2m24s 10.244.1.10 node-1 <none> <none>pod/nginx-deployment-6696798b78-wx2r2 1/1 Running 0 2m24s 10.244.1.8 node-1 <none> <none>pod/tomcat-deployment-58467d5474-d7cn5 1/1 Running 0 2m24s 10.244.1.9 node-1 <none> <none>pod/tomcat-deployment-58467d5474-kwhrf 1/1 Running 0 2m24s 10.244.1.5 node-1 <none> <none>pod/tomcat-deployment-58467d5474-lhbcj 1/1 Running 0 2m24s 10.244.1.6 node-1 <none> <none>NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTORservice/nginx-service ClusterIP None <none> 80/TCP 2m24s app=nginx-podservice/tomcat-service ClusterIP None <none> 8080/TCP 2m24s app=tomcat-pod-----------------------------------------------------------------------------------------------------------------------------------------------------
3、http代理（也就是ingress规则、配置规则才能使外部访问集群内部的应用）
1、创建ingress-http.yaml文件：vim ingress-http.yaml
-----------------------------------------------------------------------------------------------
apiVersion: extensions/v1beta1
kind: Ingress
metadata:name: ingress-httpnamespace: devspec:rules:- host: nginx.xiaoxin.com #自定义域名（正式环境需要正确备案的域名）http:paths:- path: / #这个路径如果是 /test 那么访问的时候就加上 http://nginx.xiaoxin.com/testbackend: #转发配置、转发到下面配置的服务serviceName: nginx-service #这个就是上面创建的service、当访问http://nginx.xiaoxin.com/时 就会转发到这个service上servicePort: 80- host: tomcat.xiaoxin.comhttp:paths:- path: /backend:serviceName: tomcat-serviceservicePort: 8080
------------------------------------------------------------------------------------------------------------------------------
2、创建Ingress：kubectl create -f ingress-http.yaml
3、查看ingress状态：·kubectl get ing ingress-http -ndev #ing是ingress的缩写------------------------------------------------------------------------------------NAME HOSTS ADDRESS PORTS AGEingress-http nginx.xiaoxin.com,tomcat.xiaoxin.com 10.97.145.253 80 73s#hosts 是域名 #posts 是http暴露的端口----------------------------------------------------------------------------------------
4、查看ingress更详细的信息：·kubectl describe ing ingress-http -ndev--------------------------------------------------------------------------------------------Name: ingress-httpNamespace: devAddress: 10.97.145.253Default backend: default-http-backend:80 (<none>)Rules:Host Path Backends---- ---- --------nginx.xiaoxin.com #看这里即可 意思是 访问nginx.xiaoxin.com + / 就转发到nginx-service:80 (10.244.1.10:80,10.244.1.7:80,10.244.1.8:80) 这三个pod去处理/ nginx-service:80 (10.244.1.10:80,10.244.1.7:80,10.244.1.8:80)tomcat.xiaoxin.com/ tomcat-service:8080 (10.244.1.5:8080,10.244.1.6:8080,10.244.1.9:8080)Annotations:Events:Type Reason Age From Message---- ------ ---- ---- -------Normal CREATE 3m58s nginx-ingress-controller Ingress dev/ingress-httpNormal UPDATE 3m19s nginx-ingress-controller Ingress dev/ingress-http----------------------------------------------------------------------------------------------------------------------------5、测式：·先在本机的hosts文件做域名解析：··路径：C:\Windows\System32\drivers\etc\hosts··添加域名 192.168.177.160 nginx.xiaoxin.com ··添加域名 192.168.177.160 tomcat.xiaoxin.com·查看第一步安装的ingress-nginx服务给的端口号：··kubectl get svc -n ingress-nginx-------------------------------------------------------------------------------------------------NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGEingress-nginx NodePort 10.97.145.253 <none> 80:30090/TCP,443:32457/TCP 134m#这里PORT 80指http协议 30090就是ingress暴露给外界访问的端口号---------------------------------------------------------------------------------------------------·浏览器访问：··http://nginx.xiaoxin.com:30090··http://tomcat.xiaoxin.com:30090
