ืืื ืืขื ืึทืจืืืงื, ืืื ืืืืื ืฆื ืจืขืื ืืืขืื ืฆืืืื ืคึฟืขืึดืงืืืื ืคืื NGINX Ingress ืฉืืึทืืืช ืฆื ืืืืึทืื ืืืง ืคืขืจืืขื ืืืืขื ืืขืืช ืืืขืืขืจ, ืืื ืืขืืื ื ืืื ืื ืืืืืืืืฉืึทื ื ืืืึธืก ืขืงืกืืกืืืจื ืืื ืืื ืืื ืืืขืื ืฆื ืึทืจืืขืื ืึทืจืื ืืื.
1. ืืฉืึทื ืืื ื ืื ืคืขืืืงืืึทื ืืึทืงืขื ื
ืืืจื ืคืขืืืงืืึทื, NGINX Ingress ื ืืฆื ืื ืคืขืืืงืืึทื ืืึทืงืขื ื, ืืืึธืก ืคึผืขืจืคืึธืจืื ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื ืคืื ืงืฆืืข. ืืึธืก ืืืื ื ืึทื ืืืขื ืืืจ ืืขืื ืึทื Ingress ืืืึธืก ืกืคึผืขืฆืืคืืฆืืจื ืึท ืืึทืืขืืึธืก ืืืึธืก ืืื ื ืืฉื ืืื ืื Ingress ืจืขืกืืจืกื, ืืืจ ืืึทืงืืืขื ืื ืคืืืืขื ืืข ืืืึทื ืืื ืึท 404 ืขื ืืคืขืจ ืงืึธื:
ืึธืืขืจ, ืืขืจ ืืื ืืขืจ ืึธืคื ืืื ืืืขืจ ืงืืืืึทื ืฅ ืงืืืขื ืืื ืึท ืืงืฉื ืฆื ืืืืึทืื ืืืืขืจ ืืืึทื ืืื ืึท ืคึฟืืจืืข ืืึธืืึธ ืืื ืื ืืขืจืข ืึทืืขื ืึทืืื ืึทื ืฉืืึธื ืคืื ื ืึธืจืืึทื 404. ืฆื ืืึธื ืืึธืก, NGINX Ingress ืืื ืจืืืืคืืื default-backend-service. ืืืจ ืคืึธืจื ืื ืคึฟืึธืจืืึทื ืคึผืึธืืืฆืืข ืืื ืึท ืึทืจืืืืขื ื ืฆื ืื ืึธืคึผืฆืืข ืืื ืื ืืขืืืข ื ืึธืืขื namespace/servicename. ืื ืคึผืึธืจื ืคืื ืื ืกืขืจืืืืก ืืึธื ืืืื 80.
ืฆื ืืึธื ืืึธืก, ืืืจ ืืึทืจืคึฟื ืฆื ืฉืึทืคึฟื ืืืื ืืืืืขื ืข ืคึผืึธื (ืืืคึผืืืืืึทื ื) ืืื ืืื ืขื ืืื ืืืื ืึทืคึผืืึทืงืืืฉืึทื ( ืคึฟืื ืื ingress-nginx ืจืืคึผืึทืืึทืืึธืจื), ืืืึธืก ืืืขื ืืืื ืืขืืขืื ืึทื ืฉืืึธื ืคืื ืื ืคืขืืืงืืึทื ืืึทืงืขื ื.
ืืึธ ืืื ืึท ืงืืืื ืืืืืกืืจืืฆืืข:
~$ curl -i -XGET http://sadsdasdas.kube-cloud.my/
HTTP/1.1 404 Not Found
Date: Mon, 11 Mar 2019 05:38:15 GMT
Content-Type: */*
Transfer-Encoding: chunked
Connection: keep-alive
<span>The page you're looking for could not be found.</span>
ืึทืืื ืึทืืข ืืึธืืืืื ื ืืืึธืก ืืขื ืขื ื ืืฉื ืืคืืจืืฉ ืืืฉืืคื ืืืจื ืืื ืืื kind: Ingress, ืคืึทืื ืืื ืคืขืืืงืืึทื-ืืึทืงืขื ื. ืืื ืืขืจ ืจืฉืืื ืืืืื, ืืขื ืคืขืื ืืื ืืขืืืืจื sadsdasdas.
2. ืืึทื ืืืื ื ืืืืคึผ ืขืจืจืึธืจืก ืืื ืื ืึทืคึผืืึทืงืืืฉืึทื ื ืืฆื ืื ืคืขืืืงืืึทื ืืึทืงืขื ื
ืื ืื ืืขืจ ืกืืืืึทืฆืืข ืืื ืจืืงืืืขืก ืืืึธืก ืขื ืืืงื ืืื ืืืืคึผ ืขืจืจืึธืจืก (404, 500, 502 ...) ืฆื ืึท ืึทืคึผืืึทืงืืืฉืึทื ืืืึธืก ืืื ื ืืฉื ืคึผืจืึธืฆืขืก ืึทืืึท ืกืืืืึทืืืึธื ืก (ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื ืฉืืื ืืืขืืขืจ ืืขื ืขื ื ืืฉื ืืืฉืขื ืขืจืืืืึทื). ืืึธืก ืงืขื ืืืื ืืืื ืจืขืื ืฆื ืืขืจ ืคืึทืจืืึทื ื ืคืื ืืขืืืขืืึธืคึผืขืจืก ืฆื ืืื ืขื ืื ืืขืืืข ืืขืืช ืืืขืืขืจ ืืื ืงืืืคื ืึทืคึผืืึทืงืืืฉืึทื ื.
ืฆื ืื ืกืืจืืืขื ื ืืขื ืคืึทื ืืืืฃ ืื ืกืขืจืืืขืจ ืืืึทื ืืืจ ืืึทืจืคึฟื:
- ืืื ืื ืื ืกืืจืึทืงืฉืึทื ื ืืืืื ืคืื ืื ืคึผืึทืจืึทืืจืึทืฃ ืืืขืื ืคืขืืืงืืึทื ืืึทืงืขื ื;
- ืืืื ืึท ืฉืืืกื ืฆื ืื nginx-ingress ืงืึทื ืคืืืืขืจืืืฉืึทื ConfigMap
custom-http-errors, ืืืฉื, ืืื ืื ืืืขืจื404,503(ืืึธื ืงืึธืจืึทืกืคึผืึทื ืื ืฆื ืื ืืขืืช ืงืึธืืื ืืืึธืก ืืขื ืขื ืืืืขืงื ืืืจื ืื ื ืืึทืข ืืขืจืฉื).
ืืขืจ ืืขืจืืืึทืจื ืจืขืืืืืึทื ืืื ืึทืืฉืืืื: ืืืขื ืืขืจ ืงืืืขื ื ืึทืคึผืืึทืงืืืฉืึทื ืืื ืคืืืกื ืืืง ืืื ืืืงืืืขื ืึท ืืขืืช ืืื ืึท ืขื ืืคืขืจ ืงืึธื ืคืื 404 ืึธืืขืจ 503, ืื ืืขืื ืืืขื ืืืื ืืืืืึธืืึทืืืฉ ืจืืืขืจืขืงืืื ืฆื ืื ื ืืึทืข ืคืขืืืงืืึทื ืืึทืงืขื ื ...
ืึธืืขืจ, ืืืขื ืืืจ ืึทื ืืืืืงืืขื ืึท ืึทืคึผืืึทืงืืืฉืึทื ืคึฟืึทืจ ืคืขืืืงืืึทื ืืึทืงืขื ื ืืื ืื ืื-ืืืืคึผ-ืขืจืจืึธืจืก, ืืืจ ืืึทืจืคึฟื ืฆื ื ืขืืขื ืืื ืืฉืืื ืึท ืืืืืืืง ืฉืืจืื:
!!! Important The custom backend is expected to return the correct HTTP status code instead of 200. NGINX does not change the response from the custom default backend.ืืขืจ ืคืึทืงื ืืื ืึทื ืืืขื ืึท ืืงืฉื ืืื ืจืืืขืจืขืงืืื, ืื ืืขืืขืจื ืืืขื ืึทื ืืืึทืืื ื ืืฆืืง ืืื ืคึฟืึธืจืืึทืฆืืข ืืื ืื ืคืจืืขืจืืืงืข ืขื ืืคืขืจ ืงืึธื ืืื ื ืึธื ืืื ืคึฟืึธืจืืึทืฆืืข (ืืืืขืจ ืืึทื ืฅ ืจืฉืืื ืืื ืื ืืืฆื ).
ืืขื ืืืื ืึทื ืืืจ ืืื ืืืื ื ืขืืขื ืงืขืืจ ืคืื ืื ืจืืืืืง ืขื ืืคืขืจ ืงืึธื. ืคืื ืื ืืึทืงืืืืขื ืืืืฉืึทื ืืื ืขืก ืึทืจืืขื.
ืคืึทืจืฉืืืขื ืข ืึทืคึผืืึทืงืืืฉืึทื ื ืืึธืื ืคืึทืจืฉืืืขื ืข ืคืขืืืงืืึทื ืืึทืงืขื ืื
ืฆื ืขื ืฉืืจ ืึทื ืื ืืืืืื ื ืืื ื ืืฉื ืืืืืืืข ืคึฟืึทืจ ืื ืืื ืฆืข ืงื ืืื, ืึธืืขืจ ืึทืคึผืืืื ืืืืื ืฆื ืกืคึผืขืฆืืคืืฉ ืึทืคึผืืึทืงืืืฉืึทื ื, ืืืจ ืขืจืฉืืขืจ ืืึทืจืคึฟื ืฆื ืงืึธื ืืจืึธืืืจื ืื Ingress ืืืขืจืกืืข. ืืืื ืขืก ืฉืืืขืืขืืขื 0.23 ืึธืืขืจ ืืขืืขืจ, ื ืืฆื ืื ืืขืืืืจื ืื ืืจืขืกืก ืึทื ืึทืืืืฉืึทื ื:
- ืืืจ ืงืขื ืขื ืึธืืืืขืจืจืืื
default-backendืคืึทืจ ืืขืืขืจ ืืื ืืจืขืกืก ; - ืืืจ ืงืขื ืขื ืึธืืืืขืจืจืืื
custom-http-errorsืคืึทืจ ืืขืืขืจ ืืื ืืจืขืกืก .
ืืื ืึท ืจืขืืืืืึทื, ืื Ingress ืืืื ืืืขื ืงืืงื ืขืคึผืขืก ืืื ืืึธืก:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: {{ .Chart.Name }}-app2
annotations:
kubernetes.io/ingress.class: "nginx"
nginx.ingress.kubernetes.io/custom-http-errors: "404,502"
nginx.ingress.kubernetes.io/default-backend: error-pages
spec:
tls:
- hosts:
- app2.example.com
secretName: wildcard-tls
rules:
- host: app2.example.com
http:
paths:
- path: /
backend:
serviceName: {{ .Chart.Name }}-app2
servicePort: 80ืืื ืืขื ืคืึทื, ืขืจืจืึธืจืก 404 ืืื 502 ืืืขื ืืืื ืจืืืขืจืขืงืืื ืฆื ืื ืกืขืจืืืืก ืคึฟืึทืจ ืืขืืช ืืืขืืขืจ ืืื ืึทืืข ืื ื ืืืืืง ืืขืืขืจื.
ะ ืคืจืืขืจืืืงืข ืืืขืจืกืืขืก ืคืื Ingress ืืึธืื ื ืืฉื ืืขื ืฉืืจืื (). ืืื ืืืื ืืืจ ืืึธืื 2 ืืึธืจ ืคืึทืจืฉืืืขื ืข ืึทืคึผืืึทืงืืืฉืึทื ื ืคืืืกื ืืืง ืืื ืืืื ืงื ืืื ืืื ืืืจ ืืืืื ืฆื ืกืคึผืขืฆืืคืืฆืืจื ืึท ืึทื ืืขืจืฉ ืคืขืืืงืืึทื-ืืึทืงืขื ื-ืืื ืกื ืืื ืคึผืจืึทืกืขืกืื ื ืคืื ืคืึทืจืฉืืืขื ืข ืืขืืช ืงืึธืืื ืคึฟืึทืจ ืืขืืขืจ ืคืื ืืื, ืคึฟืึทืจ ืืขื ืืืจ ืืืขื ืืึธืื ืฆื ื ืืฆื ืืืึธืจืงืึทืจืึธืื ืืก, ืคืื ืืืึธืก ืืืจ ืืึธืื ืฆืืืื.
ืื ืืจืขืกืก <0.23: ืฆืืืึทื ื ืืืื ืขืจ
ืืขื ืึธืคึผืฆืืข ืืื ืกืืืคึผืืขืจ. ืืื ืึท ืึทืคึผืืึทืงืืืฉืึทื ืืืึธืก ืกืขืจืืืขืก ืืืึทื ืืืขืืขืจ, ืืืจ ืืึธืื ืจืขืืืืขืจ HTML, ืืืึธืก ืงืขื ื ืืฉื ืืืืกื ืืื ืฆื ืงืืงื ืืื ืื ืืขืืขืจื ืืื ืฆืืจืืงืงืืืขื ืื ืจืืืืืง ืขื ืืคืขืจ ืงืึธืืื. ืึทืืึท ืึท ืึทืคึผืืึทืงืืืฉืึทื ืืื ืจืึธืืื ืืืืก ืืื Ingress ืคึฟืื ืื URL /error-pages, ืืื ืืื ืืขื ืงืึทืืึทืืึธื ws ืืืขื ืืืื ืื ืืืืืขืงืขืจื HTML.
ืืืืืกืืจืืฆืืข ืืื YAML:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: {{ .Chart.Name }}-app2
annotations:
kubernetes.io/ingress.class: "nginx"
ingress.kubernetes.io/server-snippet: |
proxy_intercept_errors on;
error_page 500 501 502 503 504 @error_pages;
location @error_pages {
rewrite ^ /error-pages/other/index.html break;
proxy_pass http://error-pages.prod.svc.cluster.local;
}
spec:
tls:
- hosts:
- app2.example.com
secretName: wildcard-tls
rules:
- host: app2.example.com
http:
paths:
- path: /
backend:
serviceName: {{ .Chart.Name }}-app2
servicePort: 80ืื ืกืขืจืืืืก ืคึฟืึทืจ ืืขื ืืืคึผืืืืืึทื ื ืืืื ืืืื ืคืื ืื ClusterIP ืืืคึผ.
ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื, ืืื ืื ืึทืคึผืืึทืงืืืฉืึทื ืืื ืืืจ ืืืขืื ืคึผืจืึธืฆืขืก ืืขื ืืขืืช, ืืื Ingress, ืืืจ ืืืืื ืึท ืกืขืจืืืขืจ ืกื ืืคึผืึทื ืึธืืขืจ ืงืึทื ืคืืืืขืจืืืฉืึทื ืกื ืืคึผืึทื ืืื ืื ืคืืืืขื ืืข ืืื ืืึทืื:
nginx.ingress.kubernetes.io /server-snippet: |
proxy_intercept_errors on;
error_page 500 501 502 503 504 @error_pages;
location @error_pages {
rewrite ^ /error-pages/ws/index.html break;
proxy_pass http://error-pages.prod.svc.cluster.local;
}ืื ืืจืขืกืก <0.23: ืจืืข ืฆืืืึทื ื
ืื ืืคืฆืืข ืคืืจ ืื ืืคืืืงืืฆืืข ืืืืก ืงืขื ืคืจืืฆืขืกืืจื ืืขืืขืจ... ืืื ืืืื ืืื ืืืก ื ืืขืจ ืจืืืืืืขืจ ืืืขื, ืืขืืืื ื ืคืื ืื ืื-ืืืืคึผ-ืขืจืจืขืจืก. ื ืืฆื ืขืก ืืึทื ืืืึทืื (ืงืึธืคึผืืื ื) ืืืขื ืืึธืื ืืืจ ื ืืฉื ืฆื ืืืืฉื ืื ืืืืืืืข ืกืขืืืื ืืก.
ืื ืกืืขืคึผืก ืืขื ืขื ืืื ืืืื. ืืืจ ืืึทืื ืืื ืึท ืึทืคึผืืึทืงืืืฉืึทื ืืืึธืก ืงืขื ืขื ืืขืจื ืฆื ืื ื ืืืืืง ืืขืืืืื ื ืืื ืจืืกืคึผืึทื ื ืจืืืืืง. ืืืื ืึท ืกืขืจืืืขืจ ืกื ืืคึผืึทื ืฆื ืื Ingress ืึทืคึผืืึทืงืืืฉืึทื ืืื ืื ืคืืืืขื ืืข ืืื ืืึทืื:
nginx.ingress.kubernetes.io /server-snippet: |
proxy_intercept_errors off;
error_page 404 = @custom_404;
error_page 503 = @custom_503;
location @custom_404 {
internal;
proxy_intercept_errors off;
proxy_set_header X-Code 404;
proxy_set_header X-Format $http_accept;
proxy_set_header X-Original-URI $request_uri;
proxy_set_header X-Namespace $namespace;
proxy_set_header X-Ingress-Name $ingress_name;
proxy_set_header X-Service-Name $service_name;
proxy_set_header X-Service-Port $service_port;
proxy_set_header Host $best_http_host;
rewrite ^ /error-pages/ws/index.html break;
proxy_pass http://error-pages.prod.svc.cluster.local;
}
location @custom_503 {
internal;
proxy_intercept_errors off;
proxy_set_header X-Code 503;
proxy_set_header X-Format $http_accept;
proxy_set_header X-Original-URI $request_uri;
proxy_set_header X-Namespace $namespace;
proxy_set_header X-Ingress-Name $ingress_name;
proxy_set_header X-Service-Name $service_name;
proxy_set_header X-Service-Port $service_port;
proxy_set_header Host $best_http_host;
rewrite ^ /error-pages/ws/index.html break;
proxy_pass http://error-pages.prod.svc.cluster.local;
}ืืื ืืืจ ืงืขื ืขื ืืขื, ืคึฟืึทืจ ืืขืืขืจ ืืขืืช ืืืึธืก ืืืจ ืืืืื ืฆื ืคึผืจืึธืฆืขืก, ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืื ืืื ืืืขืจ ืืืืื ืึธืจื, ืืื ืึทืืข ืื ื ืืืืืง ืืขืืขืจื ืืืขื ืืืื ืื ืกืขืจืืึทื, ืืื ืืื ืื "ืืขืืืืจื". . ืืขื ืืืขื ืืืจ ืงืขื ืขื ืืึทืื ืคืึทืจืฉืืืขื ืข ืคืขืจืืขื ืืืืขื ืืขืืช ืืืขืืขืจ ืืคืืื ืคึฟืึทืจ ืืืื ืืึธืืงืืืฉืึทื ื ืืื ืกืขืจืืืขืจืก.
ืคึผืก
ืื ืืขืจืข ืคืื โโืื K8s ืขืฆืืช ืืื ืืจืืงืก ืกืขืจืืข:
- ยซ";
- ยซ";
- ยซ";
- ยซ'.
ืืืืขื ืขื ืืืื ืืืืฃ ืืื ืืืขืจ ืืืึธื:
- ยซ";
- ยซ'.
ืืงืืจ: www.habr.com