基本框架

2026-03-21 04:36:06 +08:00
commit de1be1dbe5
125 changed files with 10302 additions and 0 deletions
--- a/ansible/files/nginx-matrix-tls/03-worker-ingress.yaml
+++ b/ansible/files/nginx-matrix-tls/03-worker-ingress.yaml
@@ -0,0 +1,110 @@
+# 03-02 TLS: M3 工作节点 + Ingress，路径 /（根路径），域名 test03.jackadam.top
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: nginx-m3-html
+  namespace: default
+data:
+  index.html: |
+    <!DOCTYPE html>
+    <html><head><meta charset="utf-8"><title>M3</title></head>
+    <body><h1>M3</h1><p>工作节点 + Ingress</p></body></html>
+  default.conf: |
+    server { listen 80; server_name localhost; root /usr/share/nginx/html; index index.html; location / { add_header X-Backend "M3"; try_files $uri $uri/ /index.html; } }
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-m3
+  namespace: default
+  labels:
+    app: nginx-m3
+    matrix: "03-02-m3"
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: nginx-m3
+  template:
+    metadata:
+      labels:
+        app: nginx-m3
+    spec:
+      nodeSelector:
+        node-role.kubernetes.io/worker: ""
+      volumes:
+        - name: html
+          configMap:
+            name: nginx-m3-html
+      containers:
+        - name: nginx
+          image: nginx:alpine
+          ports:
+            - containerPort: 80
+          volumeMounts:
+            - name: html
+              mountPath: /usr/share/nginx/html/index.html
+              subPath: index.html
+              readOnly: true
+            - name: html
+              mountPath: /etc/nginx/conf.d/default.conf
+              subPath: default.conf
+              readOnly: true
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: nginx-m3
+  namespace: default
+spec:
+  selector:
+    app: nginx-m3
+  ports:
+    - port: 80
+      targetPort: 80
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nginx-m3
+  namespace: default
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls.certresolver: cloudflare
+spec:
+  tls:
+    - hosts:
+        - test03.jackadam.top
+  rules:
+    - host: test03.jackadam.top
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: nginx-m3
+                port:
+                  number: 80
+---
+# 03-02 HTTP-only：M3 路由（仅 web，无 TLS），与 nginx-m3 共用 Service
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: nginx-m3-http
+  namespace: default
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: web
+spec:
+  rules:
+    - host: test03.jackadam.top
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: nginx-m3
+                port:
+                  number: 80