k8s 采用ingress 负载分发微服务

1. 下载：yaml文件，里面包含所有的创建的yaml文件，https://github.com/kubernetes/ingress-nginx/blob/nginx-0.20.0/deploy/mandatory.yaml
2. 创建namesapce 。可选。
   https://github.com/kubernetes/ingress-nginx/blob/nginx-0.20.0/deploy/namespace.yaml
3. 创建configmap 。
   https://github.com/kubernetes/ingress-nginx/blob/nginx-0.20.0/deploy/configmap.yaml
4. 创建 default-backend, 域名不存在默认转发的服务。创建defualt-backend服务

apiVersion: extensions/v1beta1
		kind: Deployment
		metadata:
		  name: default-http-backend
		  labels:
		    app: default-http-backend
		  namespace: default
		spec:
		  replicas: 1
		  selector:
		    matchLabels:
		      app: default-http-backend
		  template:
		    metadata:
		      labels:
		        app: default-http-backend
		    spec:
		      terminationGracePeriodSeconds: 60
		      containers:
		      - name: default-http-backend
		        # Any image is permissible as long as:
		        # 1. It serves a 404 page at /
		        # 2. It serves 200 on a /healthz endpoint
		        image: gcr.mirrors.ustc.edu.cn/google_containers/defaultbackend:1.4
		        livenessProbe:
		          httpGet:
		            path: /healthz
		            port: 8080
		            scheme: HTTP
		          initialDelaySeconds: 30
		          timeoutSeconds: 5
		        ports:
		        - containerPort: 8080
		        resources:
		          limits:
		            cpu: 10m
		            memory: 20Mi
		          requests:
		            cpu: 10m
		            memory: 20Mi
		---
		
		apiVersion: v1
		kind: Service
		metadata:
		  name: default-http-backend
		  namespace: default
		  labels:
		    app: default-http-backend
		spec:
		  ports:
		  - port: 80
		    targetPort: 8080
		  selector:
		    app: default-http-backend

5. 创建rbac。
   负责Ingress的RBAC授权的控制，其创建了Ingress用到的ServiceAccount、ClusterRole、Role、RoleBinding、ClusterRoleBinding
6. 创建with-rbac.是Ingress的核心，用于创建ingress-controller。前面提到过，ingress-controller的作用是将新加入的Ingress进行转化为Nginx的配置。此controller会在每个node都启动一个nginx服务，同时将容器应用监听的80，443端口号映射到物理机上，然后客户端可以通过http//ip:80/来访问改ingress controller。

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: nginx-ingress-controller
  namespace: ingress-nginx
  labels:
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/part-of: ingress-nginx
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: ingress-nginx
      app.kubernetes.io/part-of: ingress-nginx
  template:
    metadata:
      labels:
        app.kubernetes.io/name: ingress-nginx
        app.kubernetes.io/part-of: ingress-nginx
      annotations:
        prometheus.io/port: "10254"
        prometheus.io/scrape: "true"
    spec:
      serviceAccountName: nginx-ingress-serviceaccount
      containers:
        - name: nginx-ingress-controller
          image: quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.20.0
          args:
            - /nginx-ingress-controller
            - --default-backend-service=$(POD_NAMESPACE)/default-http-backend
            - --configmap=$(POD_NAMESPACE)/nginx-configuration
            - --tcp-services-configmap=$(POD_NAMESPACE)/tcp-services
            - --udp-services-configmap=$(POD_NAMESPACE)/udp-services
            - --publish-service=$(POD_NAMESPACE)/ingress-nginx
            - --annotations-prefix=nginx.ingress.kubernetes.io
          securityContext:
            capabilities:
              drop:
                - ALL
              add:
                - NET_BIND_SERVICE
            # www-data -> 33
            runAsUser: 33
          env:
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: POD_NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
          ports:
            - name: http
              containerPort: 80
            - name: https
              containerPort: 443
          livenessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 10254
              scheme: HTTP
            initialDelaySeconds: 10
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
          readinessProbe:
            failureThreshold: 3
            httpGet:
              path: /healthz
              port: 10254
              scheme: HTTP
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1

7. 创建ingress-nginx服务。

apiVersion: v1
kind: Service
metadata:
  name: ingress-nginx
  namespace: default
  labels:
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/part-of: ingress-nginx
spec:
  type: NodePort
  ports:
    - name: http
      port: 80
      targetPort: 80
      protocol: TCP
    - name: https
      port: 443
      targetPort: 443
      protocol: TCP
  selector:
    app.kubernetes.io/name: ingress-nginx
    app.kubernetes.io/part-of: ingress-nginx

8.创建ingress访问策略，映射到自己的微服务。

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  labels:
    run: acloud-ingress
  name: acloud-ingress
  namespace: default
  annotations: 
     kubernetes.io/ingress.class: "nginx"
spec:
  rules: 
  - host: acloudservices.cn
    http: 
      paths: 
        - path: /info
          backend:
            serviceName: acloud-oauth
            servicePort: 18008
  - host: acloudui.cn
    http: 
      paths: 
        - path: /
          backend:
            serviceName: acloud-zuul
            servicePort: 80