Cloud Native应用交付

  • 首页
  • 关于本站
  • 个人介绍
  • Downloads
  • Repo
    • Github
    • Container
  • F5
    • F5 Python SDK
    • F5-container
    • F5-LBaaS
  • 社交
    • 联系我
    • 微信/微博
    • 公众号
    • 打赏赞助
行至水穷处 坐看云起时
Cloud Native Application Services: cnadn.net
  1. 首页
  2. NGINX
  3. 正文

Helm 3 部署NGINX Ingress Controller

2020年06月28日 8870点热度 1人点赞 0条评论

安装NGINX官方helm repo

1
helm repo add nginx-stable https://helm.nginx.com/stable

安装过程演示

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
[root@k8s-master-v1-16 ~]# helm repo add nginx-stable https://helm.nginx.com/stable
"nginx-stable" has been added to your repositories
 
[root@k8s-master-v1-16 ~]# helm search repo nginx-stable
NAME                       CHART VERSION APP VERSION DESCRIPTION
nginx-stable/nginx-ingress 0.5.2         1.7.2       NGINX Ingress Controller
 
 
 
[root@k8s-master-v1-16 ~]# helm install myic nginx-stable/nginx-ingress -n ic-test --set controller.ingressClass=test-ingress
Error: rendered manifests contain a resource that already exists. Unable to continue with install: CustomResourceDefinition "transportservers.k8s.nginx.org" in namespace "" exists and cannot be imported into the current release: invalid ownership metadata; label validation error: missing key "app.kubernetes.io/managed-by": must be set to "Helm"; annotation validation error: missing key "meta.helm.sh/release-name": must be set to "myic"; annotation validation error: missing key "meta.helm.sh/release-namespace": must be set to "ic-test"
 
(由于之前手工部署过了相关CRD资源,这些CRD并不属于某个namespace,所以helm报冲突,删除手工部署的CRD重新执行)
 
[root@k8s-master-v1-16 ~]# helm install myic nginx-stable/nginx-ingress -n ic-test --create-namespace --set controller.ingressClass=test-ingress
NAME: myic
LAST DEPLOYED: Sun Jun 28 19:18:34 2020
NAMESPACE: ic-test
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
The NGINX Ingress Controller has been installed.
 
 
[root@k8s-master-v1-16 ~]# helm list  -n ic-test
NAME NAMESPACE REVISION UPDATED                               STATUS   CHART               APP VERSION
myic ic-test   1       2020-06-28 19:18:34.80694826 +0800 CST deployed nginx-ingress-0.5.2 1.7.2
 
 
[root@k8s-master-v1-16 ~]# kubectl get deploy myic-nginx-ingress -n ic-test -o yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: "1"
    meta.helm.sh/release-name: myic
    meta.helm.sh/release-namespace: ic-test
  creationTimestamp: "2020-06-28T11:18:35Z"
  generation: 1
  labels:
    app.kubernetes.io/instance: myic
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: myic-nginx-ingress
    helm.sh/chart: nginx-ingress-0.5.2
  name: myic-nginx-ingress
  namespace: ic-test
  resourceVersion: "30857629"
  selfLink: /apis/apps/v1/namespaces/ic-test/deployments/myic-nginx-ingress
  uid: 959981b3-6942-4e85-98e9-7d8fc5a51e63
spec:
  progressDeadlineSeconds: 600
  replicas: 1
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: myic-nginx-ingress
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      annotations:
        prometheus.io/port: "9113"
        prometheus.io/scrape: "true"
      creationTimestamp: null
      labels:
        app: myic-nginx-ingress
    spec:
      containers:
      - args:
        - -nginx-plus=false
        - -nginx-configmaps=$(POD_NAMESPACE)/myic-nginx-ingress
        - -default-server-tls-secret=$(POD_NAMESPACE)/myic-nginx-ingress-default-server-secret
        - -ingress-class=test-ingress
        - -use-ingress-class-only=false
        - -health-status=false
        - -health-status-uri=/nginx-health
        - -nginx-debug=false
        - -v=1
        - -nginx-status=true
        - -nginx-status-port=8080
        - -nginx-status-allow-cidrs=127.0.0.1
        - -report-ingress-status
        - -external-service=myic-nginx-ingress
        - -enable-leader-election=true
        - -leader-election-lock-name=myic-nginx-ingress-leader-election
        - -enable-prometheus-metrics=true
        - -prometheus-metrics-listen-port=9113
        - -enable-custom-resources=true
        - -enable-tls-passthrough=false
        env:
        - name: POD_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
        - name: POD_NAME
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.name
        image: nginx/nginx-ingress:1.7.2
        imagePullPolicy: IfNotPresent
        name: myic-nginx-ingress
        ports:
        - containerPort: 80
          name: http
          protocol: TCP
        - containerPort: 443
          name: https
          protocol: TCP
        - containerPort: 9113
          name: prometheus
          protocol: TCP
        resources: {}
        securityContext:
          allowPrivilegeEscalation: true
          capabilities:
            add:
            - NET_BIND_SERVICE
            drop:
            - ALL
          runAsUser: 101
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: myic-nginx-ingress
      serviceAccountName: myic-nginx-ingress
      terminationGracePeriodSeconds: 30
status:
  conditions:
  - lastTransitionTime: "2020-06-28T11:18:35Z"
    lastUpdateTime: "2020-06-28T11:18:35Z"
    message: Deployment does not have minimum availability.
    reason: MinimumReplicasUnavailable
    status: "False"
    type: Available
  - lastTransitionTime: "2020-06-28T11:18:35Z"
    lastUpdateTime: "2020-06-28T11:18:35Z"
    message: ReplicaSet "myic-nginx-ingress-69dcfbb87f" is progressing.
    reason: ReplicaSetUpdated
    status: "True"
    type: Progressing
  observedGeneration: 1
  replicas: 1
  unavailableReplicas: 1
  updatedReplicas: 1
 
 
  [root@k8s-master-v1-16 ~]# kubectl get all -n ic-test
NAME                                      READY   STATUS              RESTARTS   AGE
pod/myic-nginx-ingress-69dcfbb87f-6zqfn   0/1     ContainerCreating   0          2m6s
 
NAME                         TYPE           CLUSTER-IP       EXTERNAL-IP   PORT(S)                      AGE
service/myic-nginx-ingress   LoadBalancer   10.101.100.233   <pending>     80:32379/TCP,443:31638/TCP   2m7s
 
NAME                                 READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/myic-nginx-ingress   0/1     1            0           2m6s
 
NAME                                            DESIRED   CURRENT   READY   AGE
replicaset.apps/myic-nginx-ingress-69dcfbb87f   1         1         0       2m6s
[root@k8s-master-v1-16 ~]# kubectl get cm -n ic-test
NAME                                 DATA   AGE
istio-ca-root-cert                   1      2m15s
myic-nginx-ingress                   0      2m15s
myic-nginx-ingress-leader-election   0      2m15s
[root@k8s-master-v1-16 ~]# kubectl get secrets -n ic-test
NAME                                       TYPE                                  DATA   AGE
default-token-94dmh                        kubernetes.io/service-account-token   3      2m26s
myic-nginx-ingress-default-server-secret   Opaque                                2      2m26s
myic-nginx-ingress-token-bwh7p             kubernetes.io/service-account-token   3      2m26s
sh.helm.release.v1.myic.v1                 helm.sh/release.v1                    1      2m26s
 
 
 
[root@k8s-master-v1-16 ~]# helm uninstall myic -n ic-test
release "myic" uninstalled

相关文章

  • 扩展或影响nginx(Ingress Controller)配置的方法
  • 集群级Ingress Controller免重载动态性限流(2)
  • 集群级Ingress Controller免重载动态性限流(1)
  • How to build Nginx Plus as k8s Ingress controller and run with F5 CIS together
  • 欢迎参加F5 NGINX Sprint China 2022
本作品采用 知识共享署名-非商业性使用 4.0 国际许可协议 进行许可
标签: helm ingress controller nginx
最后更新:2020年06月29日

纳米

linjing.io

打赏 点赞
< 上一篇
下一篇 >

文章评论

取消回复

此站点使用Akismet来减少垃圾评论。了解我们如何处理您的评论数据。

纳米

linjing.io

☁️迈向Cloud Native ADC ☁️

认证获得:
TOGAF: ID 152743
Kubernetes: CKA #664
Microsoft: MCSE MCDBA
Cisco: CCNP
Juniper: JNCIS
F5:
F5 Certified Solution Expert, Security
F5 Certified Technology Specialist, LTM/GTM/APM/ASM
F5 Certified BIG-IP Administrator
  • 点击查看本博技术要素列表
  • 归档
    分类
    • Automation
    • Avi Networks
    • Cisco ACI
    • CISCO资源
    • F5 with ELK
    • F5-Tech tips
    • F5技术
    • Juniper
    • Linux
    • NGINX
    • SDN
    • ServiceMesh
    • WEB编程
    • WINDOWS相关
    • 业界文章
    • 交换机技术
    • 化云为雨/Openstack
    • 协议原理
    • 容器/k8s
    • 我的工作
    • 我的生活
    • 网站技术
    • 路由器技术
    • 项目案例
    标签聚合
    k8s istio network envoy F5 gtm api DNS nginx neutron docker irule bigip flannel openstack
    最近评论
    TomCruz 发布于 4 个月前(10月12日) 2022-18:30:24 请提供下密码,谢谢您
    lili 发布于 4 个月前(09月26日) 11:53分 请查收
    lili 发布于 4 个月前(09月26日) 打赏
    厚嘴唇 发布于 12 个月前(02月08日) ces部署之前要提前安装kube-ovn吧?
    厚嘴唇 发布于 12 个月前(02月08日) ces部署必须是在kube-ovn网络安装好之后才可以吗
    浏览次数
    • Downloads - 79,583 views
    • Github - 79,305 views
    • 迄今为止最全最深入的BIGIP-DNS/GTM原理及培训资料 - 70,988 views
    • 联系我 - 69,157 views
    • F5常见log日志解释 - 60,783 views
    • Sniffer Pro 4 70 530抓包软件 中文版+视频教程 - 50,042 views
    • 这篇文档您是否感兴趣 - 42,725 views
    • 迄今为止最全最深入的BIGIP-DNS/GTM原理及培训资料 - 36,621 views
    • F5利用Elastic stack(ELK)进行应用数据挖掘系列(2)-DNS - 30,732 views
    • F5利用Elastic stack(ELK)进行应用数据挖掘系列(1)-HTTP - 29,882 views
    链接表
    • Jimmy Song‘s Blog
    • SDNap
    • SDNlab
    • SDN论坛
    • Service Mesh社区
    • 三斗室
    • 个人profile

    COPYRIGHT © 2022 Cloud Native应用交付. ALL RIGHTS RESERVED.

    Theme Kratos Made By Seaton Jiang

    京ICP备14048088号-1

    京公网安备 11010502041506号