kubernetes-ingress 安装

kubernetes-ingress 安装

官方文档：
       https://github.com/nginxinc/kubernetes-ingress/blob/release-1.5/docs/installation.md

部署环境：

•     边缘节点配置标签：nodeRole: app-edge
•     Ingress 经过DaemonSet方式部署到对应的边缘节点分组

拉取代码仓库：

git clone https://github.com/nginxinc/kubernetes-ingress.git
cd kubernetes-ingress 
git checkout v1.5.8

 修改配置文件： deployments/daemon-set/nginx-ingress.yaml 

Ingress网络方式：

• hostNetwork  （直接使用主机网络，能够绕过Iptables的转发）
• hostPort          （Iptables：  nf_conntrack: table full, dropping packet ）
• NodePort         （Iptables：  nf_conntrack: table full, dropping packet ）

# 增长nodeSelector 绑定到指定的边缘节点
+      nodeSelector:
+        nodeRole: app-edge

#  使用主机网络
    spec:
      hostNetwork: true    # 启用主机网络
      dnsPolicy: ClusterFirstWithHostNet   # 默认DNS使用节点的配置，经过修改dnsPloicy优先使用集群DNS

#  完成配置以下：

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: nginx-ingress
  namespace: nginx-ingress
spec:
  selector:
    matchLabels:
      app: nginx-ingress
  template:
    metadata:
      labels:
        app: nginx-ingress
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "9113"
    spec:
      hostNetwork: true
      dnsPolicy: ClusterFirstWithHostNet
      serviceAccountName: nginx-ingress
      nodeSelector:
        nodeRole: app-edge
      containers:
      - image: nginx/nginx-ingress:1.5.8
        name: nginx-ingress
        ports:
        - name: http
          containerPort: 80
        - name: https
          containerPort: 443
        - name: prometheus
          containerPort: 9113
        env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              fieldPath: metadata.namespace
        - name: POD_NAME
          valueFrom:
            fieldRef:
              fieldPath: metadata.name
        args:
          - -nginx-configmaps=$(POD_NAMESPACE)/nginx-config
          - -default-server-tls-secret=$(POD_NAMESPACE)/default-server-secret
         #- -v=3 # Enables extensive logging. Useful for troubleshooting.
         #- -report-ingress-status
         #- -external-service=nginx-ingress
         #- -enable-leader-election
          - -enable-prometheus-metrics
         #- -enable-custom-resources

执行安装部署

cd deployments
kubectl apply -f common/ns-and-sa.yaml
kubectl apply -f common/default-server-secret.yaml
kubectl apply -f common/nginx-config.yaml
kubectl apply -f common/custom-resource-definitions.yaml
kubectl apply -f rbac/rbac.yaml
kubectl apply -f daemon-set/nginx-ingress.yaml

经过边缘节点查看Nginx-ingress端口