使用helm安装ingress，实现用域名的方式访问k8s内部应用

k8s集群版本

k8s集群版本是1.22

提前部署好nginx服务和创建好svc

deployment方式部署的nginx服务，1个副本

创建的服务

通过服务可以代理到nginx服务

curl 10.105.183.50:801

安装helm管理工具

https://helm.sh/docs/intro/install/

tar -zxvf helm-v3.6.3-linux-amd64.tar.gz

mv linux-amd64/helm /usr/local/bin/helm

helm version

添加ingress的helm仓库

helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx

helm repo list

另外，如果要移除，helm repo remove ingress-nginx

搜索ingress-nginx

helm search repo ingress-nginx

下载

helm pull ingress-nginx/ingress-nginx --version 4.0.6

解压、配置

tar xf ingress-nginx-4.0.1.tgz

cd ingress-nginx

vim values.yaml

配置文件已经放到网盘

部署ingress-nginx-controller

创建命名空间：kubectl create ns ingress-nginx

安装到node1，给node1打标签：kubectl label node k8s-node01 ingress=true

安装：helm install ingress-nginx -n ingress-nginx .

（卸载：helm uninstall ingress-nginx -n ingress-nginx）

NAME: ingress-nginx

LAST DEPLOYED: Sun Dec 12 20:01:46 2021

NAMESPACE: ingress-nginx

STATUS: deployed

REVISION: 1

TEST SUITE: None

NOTES:

The ingress-nginx controller has been installed.

Get the application URL by running these commands:

  export POD_NAME=$(kubectl --namespace ingress-nginx get pods -o jsonpath="{.items[0].metadata.name}" -l "app=ingress-nginx,component=controller,release=ingress-nginx")

  kubectl --namespace ingress-nginx port-forward $POD_NAME 8080:80

  echo "Visit http://127.0.0.1:8080 to access your application."

An example Ingress that makes use of the controller:

  apiVersion: networking.k8s.io/v1

  kind: Ingress

  metadata:

    annotations:

      kubernetes.io/ingress.class: nginx

    name: example

    namespace: foo

  spec:

    ingressClassName: example-class

    rules:

      - host: www.example.com

        http:

          paths:

            - path: /

              pathType: Prefix

              backend:

                service:

                  name: exampleService

                  port: 80

    # This section is only required if TLS is to be enabled for the Ingress

    tls:

      - hosts:

        - www.example.com

        secretName: example-tls

If TLS is enabled for the Ingress, a Secret containing the certificate and key must also be provided:

  apiVersion: v1

  kind: Secret

  metadata:

    name: example-tls

    namespace: foo

  data:

    tls.crt: <base64 encoded cert>

    tls.key: <base64 encoded key>

  type: kubernetes.io/tls

查看：kubectl get po -n ingress-nginx

服务

ps -ef |grep ingress

netstat -lntp | grep 80

创建ingress

使用v1版本

vim ingress-v1.yaml

apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

  name: test-ingress

  annotations:

    kubernetes.io/ingress.class: "nginx"

spec:

  rules:

  - host: www.baidu2.com

    http:

      paths:

      - path: /

        pathType: Prefix

        backend:

          service:

            name: nginx-svc

            port:

              number: 801