https://kubernetes.io/ko/docs/concepts/services-networking/ingress/

인그레스

하나의 IP나 도메인으로 다수의 서비스 제공

• MSA환경 제공

인그레스 룰

https://kubernetes.io/ko/docs/concepts/services-networking/ingress/#%EC%98%88%EC%A0%9C

인그레스 설치

https://github.com/kubernetes/ingress-nginx.git

git clone https://github.com/kubernetes/ingress-nginx.git
kubectl apply -k `pwd`/ingress-nginx/deploy/static/provider/baremetal/
kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io ingress-nginx-admission

• 마지막 명령 -> webhook 구성삭제, 해당 기능으로 ingress 정상 구동 않는 현상이 있음
• 인그레스를 구성하면 nginx서버가 자동으로 구성되어 룰을 설정할 수 있는 준비가 세팅됨

설치확인

kubectl get all -n ingress-nginx

인그레스 룰 세팅

https://kubernetes.io/ko/docs/concepts/services-networking/ingress/#%EC%98%88%EC%A0%9C

cat <<EOF | kubectl apply -f -
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: http-go-ingress
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/rewrite-target: /welcome/test
spec:
  rules:
    - http:
        paths:
          - pathType: Exact
            path: /welcome/test
            backend:
              service:
                name: http-go
                port:
                  number: 80
EOF

• pathType: 룰 정확히 일치 (path)
• backend: 연결할 서비스 이름 설정 + 포트
• 인그레스 클래스: nginx로 설정

Warning: annotation "kubernetes.io/ingress.class" is deprecated, please use 'spec.ingressClassName' instead
ingress.networking.k8s.io/http-go-ingress created

인그레스 실행

kubectl create deployment http-go --image=gasbugs/http-go:ingress
kubectl expose deployment http-go --port=80 --target-port=8080

kubectl exec -it http-go-7fd8fc8d7b-f7twh -- bash

---

인그레스 확인

curl 127.0.0.1:31233

---

TLS 설정

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
 -out ingress-tls.crt \
 -keyout ingress-tls.key \
 -subj "/CN=ingress-tls" 

kubectl create secret tls ingress-tls \
--namespace default \
--key ingress-tls.key \
--cert ingress-tls.crt

kubectl get secret

TLS 적용 인그레스 생성

cat <<EOF | kubectl apply -f -
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: http-go-ingress
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/rewrite-target: /welcome/test
    nginx.ingress.kubernetes.io/ssl-redirect: "true" # 리다이렉트 설정
spec:
  tls:
  - hosts:
    - gasbugs.com
    secretName: ingress-tls
  rules:
    - host: gasbugs.com
      http:
        paths:
          - pathType: Exact
            path: /welcome/test
            backend:
              service:
                name: http-go
                port:
                  number: 80
EOF

확인

curl http://gasbugs.com:포트/welcome/test -kv --resolve gasbugs.com:포트:127.0.0.1

spec.tls.hosts: gassbugs.com -> gasbugs.com 으로 고치니 잘 실행되었음..
uri 오타 잘 확인할것..

---

kubectl create deploy http-go --image=gasbugs/http-go
kubectl expose deploy http-go --port=80 --target-port=8080

kubectl create deploy tomcat --image=consol/tomcat07.0
kubectl expose deploy tomcat --port=80 --target-port=8080

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
 -out gasbugs-tls.crt \
 -keyout gasbugs-tls.key \
 -subj "/CN=gasbugs-tls" 

kubectl create secret tls gasbugs-tls \
--namespace default \
--key gasbugs-tls.key \
--cert gasbugs-tls.crt


cat <<EOF | kubectl apply -f -
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: http-go-ingress
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/rewrite-target: /
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
spec:
  tls:
  - hosts:
    - tomcat.gasbugs.com
    - http-go.gasbugs.com
    secretName: gasbugs-tls
  rules:
    - host: tomcat.gasbugs.com
      http:
        paths:
          - pathType: Prefix
            path: /
            backend:
              service:
                name: tomcat
                port:
                  number: 80
    - host: http-go.gasbugs.com
      http:
        paths:
          - pathType: Prefix
            path: /
            backend:
              service:
                name: http-go
                port:
                  number: 80
EOF

curl https://tomcat.gasbugs.com:31743/ -kv --resolve tomcat.gasbugs.com:31743:127.0.0.1
curl https://http-go.gasbugs.com:31743/ -kv --resolve http-go.gasbugs.com:31743:127.0.0.1