111 lines
2.6 KiB
YAML
111 lines
2.6 KiB
YAML
# 03-02 TLS: M3 工作节点 + Ingress，路径 /（根路径），域名 test03.jackadam.top
|
||
---
|
||
apiVersion: v1
|
||
kind: ConfigMap
|
||
metadata:
|
||
name: nginx-m3-html
|
||
namespace: default
|
||
data:
|
||
index.html: |
|
||
<!DOCTYPE html>
|
||
<html><head><meta charset="utf-8"><title>M3</title></head>
|
||
<body><h1>M3</h1><p>工作节点 + Ingress</p></body></html>
|
||
default.conf: |
|
||
server { listen 80; server_name localhost; root /usr/share/nginx/html; index index.html; location / { add_header X-Backend "M3"; try_files $uri $uri/ /index.html; } }
|
||
---
|
||
apiVersion: apps/v1
|
||
kind: Deployment
|
||
metadata:
|
||
name: nginx-m3
|
||
namespace: default
|
||
labels:
|
||
app: nginx-m3
|
||
matrix: "03-02-m3"
|
||
spec:
|
||
replicas: 1
|
||
selector:
|
||
matchLabels:
|
||
app: nginx-m3
|
||
template:
|
||
metadata:
|
||
labels:
|
||
app: nginx-m3
|
||
spec:
|
||
nodeSelector:
|
||
node-role.kubernetes.io/worker: ""
|
||
volumes:
|
||
- name: html
|
||
configMap:
|
||
name: nginx-m3-html
|
||
containers:
|
||
- name: nginx
|
||
image: nginx:alpine
|
||
ports:
|
||
- containerPort: 80
|
||
volumeMounts:
|
||
- name: html
|
||
mountPath: /usr/share/nginx/html/index.html
|
||
subPath: index.html
|
||
readOnly: true
|
||
- name: html
|
||
mountPath: /etc/nginx/conf.d/default.conf
|
||
subPath: default.conf
|
||
readOnly: true
|
||
---
|
||
apiVersion: v1
|
||
kind: Service
|
||
metadata:
|
||
name: nginx-m3
|
||
namespace: default
|
||
spec:
|
||
selector:
|
||
app: nginx-m3
|
||
ports:
|
||
- port: 80
|
||
targetPort: 80
|
||
---
|
||
apiVersion: networking.k8s.io/v1
|
||
kind: Ingress
|
||
metadata:
|
||
name: nginx-m3
|
||
namespace: default
|
||
annotations:
|
||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||
traefik.ingress.kubernetes.io/router.tls.certresolver: cloudflare
|
||
spec:
|
||
tls:
|
||
- hosts:
|
||
- test03.jackadam.top
|
||
rules:
|
||
- host: test03.jackadam.top
|
||
http:
|
||
paths:
|
||
- path: /
|
||
pathType: Prefix
|
||
backend:
|
||
service:
|
||
name: nginx-m3
|
||
port:
|
||
number: 80
|
||
---
|
||
# 03-02 HTTP-only：M3 路由（仅 web，无 TLS），与 nginx-m3 共用 Service
|
||
apiVersion: networking.k8s.io/v1
|
||
kind: Ingress
|
||
metadata:
|
||
name: nginx-m3-http
|
||
namespace: default
|
||
annotations:
|
||
traefik.ingress.kubernetes.io/router.entrypoints: web
|
||
spec:
|
||
rules:
|
||
- host: test03.jackadam.top
|
||
http:
|
||
paths:
|
||
- path: /
|
||
pathType: Prefix
|
||
backend:
|
||
service:
|
||
name: nginx-m3
|
||
port:
|
||
number: 80
|