Open Ta//k 公开课 # Traefik 在又拍云的应用和改造 陈卓 又拍云系统开发工程师 又拍云 ## 分享内容 - Traefik 简介 - Traefik 跟 Ingress-Nginx 比较 - 我们为什么使用 Traefik - Traefik 改造之路 ## Traefik 简介 ## traffic  ## 为什么选择 Traefik，不用其它产品 |ingress-nginx/kong/apisix|controller 使用 go，网关使用基于 openresty 的软件性能有保障，但增加修改，kong/apisix 需要额外的存储| |---|---| |

Namespace metadata: name: ingress-nginx --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: default-psp-role namespace: ingress-nginx rules: - apiGroups: - authorization.k8s.io/v1 kind: RoleBinding metadata: name: default-psp-rolebinding namespace: ingress-nginx roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: default-psp-role subjects: metadata: name: ingress-nginx apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: default-psp-role namespace: ingress-nginx rules: - apiGroups: - extensions

v1 kind: Namespace metadata: name: ingress-nginx apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: default-psp-role namespace: ingress-nginx rules: apiGroups: - extensions authorization.k8s.io/v1 kind: RoleBinding metadata: name: default-psp-rolebinding namespace: ingress-nginx roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: default-psp-role subjects: name: ingress-nginx apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: default-psp-role namespace: ingress-nginx rules:

default-psp-role -n ingress-nginx kubectl get role default-psp-role -n cattle-system kubectl get clusterrole psp:restricted • Verify the bindings are set correctly: kubectl get rolebinding -n ingress-nginx default-psp-rolebinding apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: default-psp-role namespace: ingress-nginx rules: - apiGroups: - extensions resourceNames: - default-psp resources: RoleBinding metadata: - name: default-psp-rolebinding namespace: ingress-nginx roleRef: apiGroup: rbac.authorization.k8s.io kind: Role

kubectl get ns | grep cattle • Verify that the roles exist: kubectl get role default-psp-role -n ingress-nginx kubectl get role default-psp-role -n cattle-system kubectl get clusterrole restricted-clusterrole restricted-clusterrole • Verify the bindings are set correctly: kubectl get rolebinding -n ingress-nginx default-psp-rolebinding kubectl get rolebinding -n cattle-system default-psp-rolebinding kubectl get clusterrolebinding apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: default-psp-role namespace: ingress-nginx rules: - apiGroups: - extensions resourceNames: - default-psp resources:

的转发规则 k8s-ingress-nginx 官网地址 https://kubernetes.github.io/ingress-nginx/deploy/ # wget https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.2.0/deploy/static/provider/cloud/deploy.yaml https://limaofu.github.io/scripts/ingress-nginx-controller-v1.2.0.yaml # 需要提前下载以下 2 个镜像 k8s.gcr.io/ingress-nginx/kube-webhook-certgen:v1.1.1 # vi ingress-nginx-controller-v1.2.0.yaml # 可以指定 image 为环境里的镜像仓库地址 cof-lee.com:5443/ingress-nginx/controller:v1.2.0 image: cof-lee.com:5443/ingress-nginx/kube-webhook-certgen:v1.1.1 image: PullPolicy: If Not Present image: cof-lee.com:5443/ingress-nginx/kube-webhook-certgen:v1

Deploy an nginx-ingress controller: • For more information, see https://kubernetes.github.io/ingress-nginx/deploy/#bare-metal. • Create the nginx-ingress controller as a nodePort service according to com/kubernetes/ingress-nginx/controller-v0.46.0/deploy/static/provider/baremetal/deploy.yaml • Determine the port the nginx controller is redirecting HTTPS to: $ kubectl -n ingress-nginx get svc ingress-nginx-controller ingress-nginx-controller The output should be similar to the below: kubectl -n ingress-nginx get svc ingress-nginx-controller NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE ingress-nginx-controller NodePort

CN 使用 Go 重新实现一套 Service Mesh 张晋涛 API7.ai 云原生技术专家 个人介绍 张晋涛 Apache APISIX PMC Kubernetes Ingress-NGINX maintainer Microsoft MVP 『K8S生态周报』的维护者 公众号：『MoeLove』 GitHub: https://github.com/tao1234566333

兼容的集中存储）；FusionCompute 平台：支持 OceanStor；网络方案支持 CoreDNS；支持 Flannel / Calico 网络插件；支持 ingress-nginx / Traefik；支持通过 F5 Big IP 对外暴露服务（X-Pack）；GPU 方案支持

run labring/openebs:v1.9.0 # install openebs sealos run labring/minio-operator:v4.4.16 labring/ingress-nginx:4.1.0 \ labring/mysql-operator:8.0.23-14.1 labring/redis-operator:3.1.4 # oneliner $ sealos