k8s运维记

目的

使用kong作为目录/data/reports的静态资源服务器，为了测试，已于目录/data/reports下创建文件report.html，如下：

<html>
<head></head>
<body><h1>测试报告</h1></body>
</html>

一、编写nginx自定义模板

获取kong自定义的nginx配置

[root@justmine ~]# kubectl -n [kong所在的命名空间] exec -it [kong pod完全限定名] sh 
[root@justmine ~]# cat /usr/local/kong/nginx.conf

将nginx.conf内容复制出来，新的nginx模板将在此内容上进行修改，避免修改后无法启动kong容器。

添加托管静态资源配置

worker_processes auto;
daemon off;

pid pids/nginx.pid;
error_log /dev/stderr notice;

worker_rlimit_nofile 65536;

events {
    worker_connections 16384;
    multi_accept on;
}

http {
    include 'nginx-kong.conf';
	# 上面为kong本身配置，下面为提供静态资源的配置。
	server {
        listen 8005 default_server;
        index index.html;
        root /kong/nginx/www;
    }
}

将上面的文件保存到k8s

[root@justmine ~]# kubectl -n [kong所在的命名空间] create configmap kong-nginx-custom-config --from-file=/data/kong/custom_nginx.template

二、配置kong

挂载自定义配置

volumes:
- configMap:
          defaultMode: 420
          name: kong-nginx-custom-config
        name: kong-nginx-custom-config
---中间省略---        
- mountPath: /usr/local/kong/nginx.conf
          name: kong-nginx-custom-config
          subPath: custom_nginx.template

- mountPath: /kong/nginx/www
          name: staging-test-reports
---中间省略---
- hostPath:
          path: /data/reports
          type: DirectoryOrCreate
        name: staging-test-reports

添加服务和路由

#!/bin/bash

set -e
IFS=$'

'

echo ""
echo "Start building the cnd-sure-route dynamically..."

declare svcName="自定义服务名称"
declare kongServiceBaseUrl="http://[kong admin地址]/services"
declare sureRouteSvcUrl="http://localhost:8005"

# resilience handle
# Maximum time in seconds that you allow the whole operation to take.
declare maxTime=5 
# Maximum time in seconds that you allow the connection to the server to take.
declare maxConnectTime=2
declare retryCount=5

## add services
function createService()
{
	curl -X POST $1 
	--connect-timeout $2 
	--max-time $3 
	--retry $4 
	-H  "accept: application/json" 
	-H  "Content-Type: application/json" 
	-d "{ "name": "$5",  "url": "$6"}";
}
createService $kongServiceBaseUrl $maxConnectTime $maxTime $retryCount $svcName $sureRouteSvcUrl

## add routes
declare kongRouteBaseUrl="http://[kong admin地址]/routes"
declare kongRouteDomain="[路由绑定的域名]"

function createRoute()
{
    declare svcResponse=$(curl -X GET $kongServiceBaseUrl/$5 --connect-timeout $2 --max-time $3 --retry $4)
    declare JQ_EXEC=`which jq`
    declare svcId=$(echo $svcResponse | ${JQ_EXEC} .id | sed 's/"//g')
	declare defMethods="["GET"]"

	set +e
	if [ -n "$8" ]; then
	   defMethods=$8
	fi

	if [ -z "$svcId" ]; then
	  echo "Warnning, failed to get the service[$5] identifier, route cannot be created.";
    else
	  curl -X POST $1 
	    --connect-timeout $2 
	    --max-time $3 
	    --retry $4 
	    -H  "accept: application/json" 
	    -H  "Content-Type: application/json" 
	    -d "{ "service": "{"id":"$svcId"}","paths": "["$6"]","methods": "$defMethods","strip_path":$7,"hosts": "["$kongRouteDomain"]"}";
	fi
	set -e
}

declare sureRouteRouteUrl="/"

createRoute $kongRouteBaseUrl $maxConnectTime $maxTime $retryCount $svcName $sureRouteRouteUrl true

echo ""
echo "Dynamicly building the cnd-sure-route successfully !!!"

备注：也可以使用kong的dashboad完成上面shell脚本的功能。

k8s运维记

目的

一、编写nginx自定义模板

二、配置kong

三、测试