Kubernetes Ingress Controller ile HTTP Yonetimi

Ingress Nedir

Kubernetes'te dis trafigi cluster icindeki servislere yonlendiren API nesnesi. Her servis icin LoadBalancer yerine tek giris noktasi.

Nginx Ingress Kurulumu

helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update

helm install ingress-nginx ingress-nginx/ingress-nginx 
    --namespace ingress-nginx --create-namespace 
    --set controller.replicaCount=2

# Durum kontrol
kubectl get pods -n ingress-nginx
kubectl get svc -n ingress-nginx

Ingress Kaynagi

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: web-ingress
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
    nginx.ingress.kubernetes.io/ssl-redirect: 'true'
    nginx.ingress.kubernetes.io/rate-limit: '100'
spec:
  ingressClassName: nginx
  tls:
    - hosts: [emrecihan.com.tr]
      secretName: tls-secret
  rules:
    - host: emrecihan.com.tr
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: web-app
                port: {number: 80}
          - path: /api
            pathType: Prefix
            backend:
              service:
                name: api-service
                port: {number: 8080}

Cert-Manager ile Otomatik TLS

helm install cert-manager jetstack/cert-manager 
    --namespace cert-manager --create-namespace 
    --set installCRDs=true

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: hello@emrecihan.com.tr
    privateKeySecretRef:
      name: letsencrypt-key
    solvers:
      - http01:
          ingress:
            class: nginx

Ingress Controller, Kubernetes'te HTTP trafik yonetimini merkezi ve temiz sekilde cozer.