Kubenetes 中使用 Traefik 作为 Ingress 转发流量
Ingress 就是 Kubernetes 机器外访问集群的入口，将请求的 URL 转发到不同的 Service 上，相当于 Nginx 等代理服务器
路由信息由 Ingress Controller 提供，Ingress Controller 可以理解为监视器，不断请求 Kubernetes API 实时感知 Service 和 Pod 的状态，结合上下文的 Ingress 生成配置，然后更新反向代理服务器的配置，达到服务发现的作用
Traefik 是一个开源的反向代理与负载均衡工具，能够与常见的微服务系统直接整合，可以实现自动化动态配置
通过配置文件部署 Traefik
配置
用于 Service Account 验证
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
| apiVersion: v1
kind: ServiceAccount
metadata:
name: ingress
namespace: kube-system
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: ingress
subjects:
- kind: ServiceAccount
name: ingress
namespace: kube-system
roleRef:
kind: ClusterRole
name: cluster-admin
apiGroup: rbac.authorization.k8s.io
|
使用 DaemonSet 部署 Traefik
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
| apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
name: traefik-ingress-lb
namespace: kube-system
labels:
k8s-app: traefik-ingress-lb
spec:
template:
metadata:
labels:
k8s-app: traefik-ingress-lb
name: traefik-ingress-lb
spec:
terminationGracePeriodSeconds: 60
hostNetwork: true
restartPolicy: Always
serviceAccountName: ingress
containers:
- image: traefik
name: traefik-ingress-lb
resources:
limits:
cpu: 200m
memory: 30Mi
requests:
cpu: 100m
memory: 20Mi
ports:
- name: http
containerPort: 80
hostPort: 80
- name: admin
containerPort: 8580
hostPort: 8580
args:
- --web
- --web.address=:8580
- --kubernetes
|
创建 Traefik 的 UI
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
| apiVersion: v1
kind: Service
metadata:
name: traefik-web-ui
namespace: kube-system
spec:
selector:
k8s-app: traefik-ingress-lb
type: NodePort
ports:
- name: web
port: 80
targetPort: 8580
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: traefik-web-ui
namespace: kube-system
spec:
rules:
- host: traefik-ui.local
http:
paths:
- path: /
backend:
serviceName: traefik-web-ui
servicePort: web
|
部署
通过 Helm 部署 Traefik
1
2
3
4
5
6
7
8
9
10
11
| dashboard:
enabled: true
domain: dashboard.traefik
serviceType: LoadBalancer
rbac:
enabled: true
deployment:
hostPort:
httpEnabled: true
httpsEnabled: true
dashboardEnabled: true
|
1
| helm install --values values.yaml stable/traefik --name traefik
|
这样就会启用 Dashboard，更改 Host 指向相应的节点和端口，访问dashboard.traefik:${PORT}就可以看到 Dashboard
1
| 192.168.0.110 dashboard.traefik
|
- 也可以直接下载 Traefik 的 Helm Release，解压后修改相应的配置后再安装
1
2
3
4
5
| helm fetch stable/traefik
tar -xvf traefik-1.24.1.tgz
helm install --values values.yaml ./traefik --name traefik
|
部署应用
1
2
3
4
5
6
7
8
9
10
11
12
13
14
| apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: backend-ingress
namespace: default
spec:
rules:
- host: rest.hellowoodes.com
http:
paths:
- path: /
backend:
serviceName: backend
servicePort: 8080
|
修改 Host 将域名指向相应的节点 IP
测试
1
| kubectl get service -l app=traefik
|
1
2
3
| NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
traefik LoadBalancer 10.106.137.170 <pending> 80:32311/TCP,443:30677/TCP 1s
traefik-dashboard ClusterIP 10.108.91.184 <none> 80/TCP 1s
|
1
2
| curl http://rest.hellowoodes.com/ping
Pong%
|
参考资料
