ingress

Ingress için, L7 (özellikle http protokolü) yeteneği olan service diyebiliriz. Ingress özelliği, bir ingress controller(IC) kaynağına ihtiyaç duyar. Kubernetes’e IC’yi başka bir sağlayıcıdan kurmamız gerkeir. En popüler olanı ingress nginx controller’dır.

Alt text

kubectl apply -f https://gist.github.com/rockcyj/a298fafad969e5ca8e77c3e66fa815fe/raw/57254e34049c963cf83a4619b0d2fb6d5b21b24f/ingress-nginx-controller-1.yaml


apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: minimal-ingress
  namespace: kubernetes-dashboard
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
spec:
  ingressClassName: nginx
  rules:
  - host: dashboard.local
    http:
          paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: kubernetes-dashboard
                port:
                  number: 80

---

# network-policy-tutorial   frontend


apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: minimal-ingress
  namespace: network-policy-tutorial 
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
spec:
  ingressClassName: nginx
  rules:
  - http:
          paths:
          - path: /frontend
            pathType: Prefix
            backend:
              service:
                name: frontend
                port:
                  number: 80



kind: Ingress
apiVersion: networking.k8s.io/v1
metadata:
  name: grafana-ingress
  namespace: monitoring
  annotations:
    kubernetes.io/ingress.class: nginx
spec:
  rules:
    - host: grafana.mylocal
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              serviceName: loki-stack-grafana
              servicePort: 80

ingress with tls

  1. Creating a Self-Signed Certificate:
  • a private key (myserver.key)
  • a self-signed certificate (myserver.crt):
   openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout myserver.key -out myserver.crt
  • the “Common Name (CN)” must match the domain name
  1. Create Kubernetes Secrets for the Certificate and Key:

  • create Kubernetes secrets

     kubectl create secret tls myserver-tls --key myserver.key --cert myserver.crt
  1. Use the Secret in an Ingress Resource:

  • Ingress resource that uses the myserver-tls secret for TLS:

     apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: my-ingress
   annotations:
     kubernetes.io/ingress.class: nginx # This depends on your ingress controller.
 spec:
   tls:
   - hosts:
     - mydomain.com
     secretName: myserver-tls
   rules:
   - host: mydomain.comfake 
     http:
       paths:
       - path: /
         pathType: Prefix
         backend:
           service:
             name: my-service-name
             port:
               number: 80

  1. Deploy and Test:

    kubectl apply -f your-ingress-file.yaml

  2. Note on Trusting Self-Signed Certificates:

  3. Alternative: Using cert-manager:

cert-manager

https://redhat-scholars.github.io/kubernetes-tutorial/kubernetes-tutorial/ingress.html

  • ingress yaml dosyaları https://github.com/redhat-scholars/kubernetes-tutorial/tree/master/apps/kubefiles