基本框架

2026-03-21 04:36:06 +08:00
commit de1be1dbe5
125 changed files with 10302 additions and 0 deletions
--- a/ansible/files/nginx-matrix-tls/02-control-ingressroute.yaml
+++ b/ansible/files/nginx-matrix-tls/02-control-ingressroute.yaml
@@ -0,0 +1,98 @@
+# 03-02 TLS: M2 控制节点 + IngressRoute，路径 /（根路径），域名 test02.jackadam.top
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: nginx-m2-html
+  namespace: default
+data:
+  index.html: |
+    <!DOCTYPE html>
+    <html><head><meta charset="utf-8"><title>M2</title></head>
+    <body><h1>M2</h1><p>控制节点 + IngressRoute</p></body></html>
+  default.conf: |
+    server { listen 80; server_name localhost; root /usr/share/nginx/html; index index.html; location / { add_header X-Backend "M2"; try_files $uri $uri/ /index.html; } }
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-m2
+  namespace: default
+  labels:
+    app: nginx-m2
+    matrix: "03-02-m2"
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nginx-m2
+  template:
+    metadata:
+      labels:
+        app: nginx-m2
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: ylc61
+      volumes:
+        - name: html
+          configMap:
+            name: nginx-m2-html
+      containers:
+        - name: nginx
+          image: nginx:alpine
+          ports:
+            - containerPort: 80
+          volumeMounts:
+            - name: html
+              mountPath: /usr/share/nginx/html/index.html
+              subPath: index.html
+              readOnly: true
+            - name: html
+              mountPath: /etc/nginx/conf.d/default.conf
+              subPath: default.conf
+              readOnly: true
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx-m2
+  namespace: default
+spec:
+  selector:
+    app: nginx-m2
+  ports:
+    - port: 80
+      targetPort: 80
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nginx-m2
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`test02.jackadam.top`)
+      kind: Rule
+      services:
+        - name: nginx-m2
+          port: 80
+  tls:
+    certResolver: cloudflare
+---
+# 03-02 HTTP-only：M2 路由（仅 web，无 TLS），与 nginx-m2 共用 Service
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: nginx-m2-http
+  namespace: default
+spec:
+  entryPoints:
+    - web
+  routes:
+    - match: Host(`test02.jackadam.top`)
+      kind: Rule
+      services:
+        - name: nginx-m2
+          port: 80