Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
k8syml
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
蒋勇
k8syml
Commits
91247767
Commit
91247767
authored
Apr 15, 2020
by
王昆
Browse files
Options
Browse Files
Download
Plain Diff
Merge branch 'master' of gitlab.gongsibao.com:jiangyong/k8syml
parents
09f1723d
5fc638e7
Show whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
448 additions
and
448 deletions
+448
-448
yamls/kong/kong-ingress-dbless.yaml
+446
-446
yamls/kong/kong-proxy-db.yaml
+2
-2
No files found.
yamls/kong/kong-ingress-dbless.yaml
View file @
91247767
...
@@ -2,456 +2,456 @@
...
@@ -2,456 +2,456 @@
#kind: Namespace
#kind: Namespace
#metadata:
#metadata:
# name: kong
# name: kong
---
#
---
apiVersion
:
apiextensions.k8s.io/v1beta1
#
apiVersion: apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
#
kind: CustomResourceDefinition
metadata
:
#
metadata:
name
:
kongconsumers.configuration.konghq.com
#
name: kongconsumers.configuration.konghq.com
spec
:
#
spec:
additionalPrinterColumns
:
#
additionalPrinterColumns:
-
JSONPath
:
.username
#
- JSONPath: .username
description
:
Username of a Kong Consumer
#
description: Username of a Kong Consumer
name
:
Username
#
name: Username
type
:
string
#
type: string
-
JSONPath
:
.metadata.creationTimestamp
#
- JSONPath: .metadata.creationTimestamp
description
:
Age
#
description: Age
name
:
Age
#
name: Age
type
:
date
#
type: date
group
:
configuration.konghq.com
#
group: configuration.konghq.com
names
:
#
names:
kind
:
KongConsumer
#
kind: KongConsumer
plural
:
kongconsumers
#
plural: kongconsumers
shortNames
:
#
shortNames:
-
kc
#
- kc
scope
:
Namespaced
#
scope: Namespaced
validation
:
#
validation:
openAPIV3Schema
:
#
openAPIV3Schema:
properties
:
#
properties:
credentials
:
#
credentials:
items
:
#
items:
type
:
string
#
type: string
type
:
array
#
type: array
custom_id
:
#
custom_id:
type
:
string
#
type: string
username
:
#
username:
type
:
string
#
type: string
version
:
v1
#
version: v1
---
#
---
apiVersion
:
apiextensions.k8s.io/v1beta1
#
apiVersion: apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
#
kind: CustomResourceDefinition
metadata
:
#
metadata:
name
:
kongcredentials.configuration.konghq.com
#
name: kongcredentials.configuration.konghq.com
spec
:
#
spec:
additionalPrinterColumns
:
#
additionalPrinterColumns:
-
JSONPath
:
.type
#
- JSONPath: .type
description
:
Type of credential
#
description: Type of credential
name
:
Credential-type
#
name: Credential-type
type
:
string
#
type: string
-
JSONPath
:
.metadata.creationTimestamp
#
- JSONPath: .metadata.creationTimestamp
description
:
Age
#
description: Age
name
:
Age
#
name: Age
type
:
date
#
type: date
-
JSONPath
:
.consumerRef
#
- JSONPath: .consumerRef
description
:
Owner of the credential
#
description: Owner of the credential
name
:
Consumer-Ref
#
name: Consumer-Ref
type
:
string
#
type: string
group
:
configuration.konghq.com
#
group: configuration.konghq.com
names
:
#
names:
kind
:
KongCredential
#
kind: KongCredential
plural
:
kongcredentials
#
plural: kongcredentials
scope
:
Namespaced
#
scope: Namespaced
validation
:
#
validation:
openAPIV3Schema
:
#
openAPIV3Schema:
properties
:
#
properties:
consumerRef
:
#
consumerRef:
type
:
string
#
type: string
type
:
#
type:
type
:
string
#
type: string
required
:
#
required:
-
consumerRef
#
- consumerRef
-
type
#
- type
version
:
v1
#
version: v1
---
#
---
apiVersion
:
apiextensions.k8s.io/v1beta1
#
apiVersion: apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
#
kind: CustomResourceDefinition
metadata
:
#
metadata:
name
:
kongingresses.configuration.konghq.com
#
name: kongingresses.configuration.konghq.com
spec
:
#
spec:
group
:
configuration.konghq.com
#
group: configuration.konghq.com
names
:
#
names:
kind
:
KongIngress
#
kind: KongIngress
plural
:
kongingresses
#
plural: kongingresses
shortNames
:
#
shortNames:
-
ki
#
- ki
scope
:
Namespaced
#
scope: Namespaced
validation
:
#
validation:
openAPIV3Schema
:
#
openAPIV3Schema:
properties
:
#
properties:
proxy
:
#
proxy:
properties
:
#
properties:
connect_timeout
:
#
connect_timeout:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
path
:
#
path:
pattern
:
^/.*$
#
pattern: ^/.*$
type
:
string
#
type: string
protocol
:
#
protocol:
enum
:
#
enum:
-
http
#
- http
-
https
#
- https
-
grpc
#
- grpc
-
grpcs
#
- grpcs
type
:
string
#
type: string
read_timeout
:
#
read_timeout:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
retries
:
#
retries:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
write_timeout
:
#
write_timeout:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
type
:
object
#
type: object
route
:
#
route:
properties
:
#
properties:
headers
:
#
headers:
additionalProperties
:
#
additionalProperties:
items
:
#
items:
type
:
string
#
type: string
type
:
array
#
type: array
type
:
object
#
type: object
https_redirect_status_code
:
#
https_redirect_status_code:
type
:
integer
#
type: integer
methods
:
#
methods:
items
:
#
items:
type
:
string
#
type: string
type
:
array
#
type: array
preserve_host
:
#
preserve_host:
type
:
boolean
#
type: boolean
protocols
:
#
protocols:
items
:
#
items:
enum
:
#
enum:
-
http
#
- http
-
https
#
- https
-
grpc
#
- grpc
-
grpcs
#
- grpcs
type
:
string
#
type: string
type
:
array
#
type: array
regex_priority
:
#
regex_priority:
type
:
integer
#
type: integer
strip_path
:
#
strip_path:
type
:
boolean
#
type: boolean
upstream
:
#
upstream:
properties
:
#
properties:
algorithm
:
#
algorithm:
enum
:
#
enum:
-
round-robin
#
- round-robin
-
consistent-hashing
#
- consistent-hashing
-
least-connections
#
- least-connections
type
:
string
#
type: string
hash_fallback
:
#
hash_fallback:
type
:
string
#
type: string
hash_fallback_header
:
#
hash_fallback_header:
type
:
string
#
type: string
hash_on
:
#
hash_on:
type
:
string
#
type: string
hash_on_cookie
:
#
hash_on_cookie:
type
:
string
#
type: string
hash_on_cookie_path
:
#
hash_on_cookie_path:
type
:
string
#
type: string
hash_on_header
:
#
hash_on_header:
type
:
string
#
type: string
healthchecks
:
#
healthchecks:
properties
:
#
properties:
active
:
#
active:
properties
:
#
properties:
concurrency
:
#
concurrency:
minimum
:
1
#
minimum: 1
type
:
integer
#
type: integer
healthy
:
#
healthy:
properties
:
#
properties:
http_statuses
:
#
http_statuses:
items
:
#
items:
type
:
integer
#
type: integer
type
:
array
#
type: array
interval
:
#
interval:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
successes
:
#
successes:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
type
:
object
#
type: object
http_path
:
#
http_path:
pattern
:
^/.*$
#
pattern: ^/.*$
type
:
string
#
type: string
timeout
:
#
timeout:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
unhealthy
:
#
unhealthy:
properties
:
#
properties:
http_failures
:
#
http_failures:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
http_statuses
:
#
http_statuses:
items
:
#
items:
type
:
integer
#
type: integer
type
:
array
#
type: array
interval
:
#
interval:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
tcp_failures
:
#
tcp_failures:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
timeout
:
#
timeout:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
type
:
object
#
type: object
type
:
object
#
type: object
passive
:
#
passive:
properties
:
#
properties:
healthy
:
#
healthy:
properties
:
#
properties:
http_statuses
:
#
http_statuses:
items
:
#
items:
type
:
integer
#
type: integer
type
:
array
#
type: array
interval
:
#
interval:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
successes
:
#
successes:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
type
:
object
#
type: object
unhealthy
:
#
unhealthy:
properties
:
#
properties:
http_failures
:
#
http_failures:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
http_statuses
:
#
http_statuses:
items
:
#
items:
type
:
integer
#
type: integer
type
:
array
#
type: array
interval
:
#
interval:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
tcp_failures
:
#
tcp_failures:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
timeout
:
#
timeout:
minimum
:
0
#
minimum: 0
type
:
integer
#
type: integer
type
:
object
#
type: object
type
:
object
#
type: object
type
:
object
#
type: object
slots
:
#
slots:
minimum
:
10
#
minimum: 10
type
:
integer
#
type: integer
type
:
object
#
type: object
version
:
v1
#
version: v1
---
#
---
apiVersion
:
apiextensions.k8s.io/v1beta1
#
apiVersion: apiextensions.k8s.io/v1beta1
kind
:
CustomResourceDefinition
#
kind: CustomResourceDefinition
metadata
:
#
metadata:
name
:
kongplugins.configuration.konghq.com
#
name: kongplugins.configuration.konghq.com
spec
:
#
spec:
additionalPrinterColumns
:
#
additionalPrinterColumns:
-
JSONPath
:
.plugin
#
- JSONPath: .plugin
description
:
Name of the plugin
#
description: Name of the plugin
name
:
Plugin-Type
#
name: Plugin-Type
type
:
string
#
type: string
-
JSONPath
:
.metadata.creationTimestamp
#
- JSONPath: .metadata.creationTimestamp
description
:
Age
#
description: Age
name
:
Age
#
name: Age
type
:
date
#
type: date
-
JSONPath
:
.disabled
#
- JSONPath: .disabled
description
:
Indicates if the plugin is disabled
#
description: Indicates if the plugin is disabled
name
:
Disabled
#
name: Disabled
priority
:
1
#
priority: 1
type
:
boolean
#
type: boolean
-
JSONPath
:
.config
#
- JSONPath: .config
description
:
Configuration of the plugin
#
description: Configuration of the plugin
name
:
Config
#
name: Config
priority
:
1
#
priority: 1
type
:
string
#
type: string
group
:
configuration.konghq.com
#
group: configuration.konghq.com
names
:
#
names:
kind
:
KongPlugin
#
kind: KongPlugin
plural
:
kongplugins
#
plural: kongplugins
shortNames
:
#
shortNames:
-
kp
#
- kp
scope
:
Namespaced
#
scope: Namespaced
validation
:
#
validation:
openAPIV3Schema
:
#
openAPIV3Schema:
properties
:
#
properties:
config
:
#
config:
type
:
object
#
type: object
disabled
:
#
disabled:
type
:
boolean
#
type: boolean
plugin
:
#
plugin:
type
:
string
#
type: string
protocols
:
#
protocols:
items
:
#
items:
enum
:
#
enum:
-
http
#
- http
-
https
#
- https
-
tcp
#
- tcp
-
tls
#
- tls
type
:
string
#
type: string
type
:
array
#
type: array
run_on
:
#
run_on:
enum
:
#
enum:
-
first
#
- first
-
second
#
- second
-
all
#
- all
type
:
string
#
type: string
required
:
#
required:
-
plugin
#
- plugin
version
:
v1
#
version: v1
---
#
---
apiVersion
:
v1
#
apiVersion: v1
kind
:
ServiceAccount
#
kind: ServiceAccount
metadata
:
#
metadata:
name
:
kong-serviceaccount
#
name: kong-serviceaccount
namespace
:
kong
#
namespace: kong
---
#
---
apiVersion
:
rbac.authorization.k8s.io/v1beta1
#
apiVersion: rbac.authorization.k8s.io/v1beta1
kind
:
ClusterRole
#
kind: ClusterRole
metadata
:
#
metadata:
name
:
kong-ingress-clusterrole
#
name: kong-ingress-clusterrole
rules
:
#
rules:
-
apiGroups
:
#
- apiGroups:
-
"
"
#
- ""
resources
:
#
resources:
-
endpoints
#
- endpoints
-
nodes
#
- nodes
-
pods
#
- pods
-
secrets
#
- secrets
verbs
:
#
verbs:
-
list
#
- list
-
watch
#
- watch
-
apiGroups
:
#
- apiGroups:
-
"
"
#
- ""
resources
:
#
resources:
-
nodes
#
- nodes
verbs
:
#
verbs:
-
get
#
- get
-
apiGroups
:
#
- apiGroups:
-
"
"
#
- ""
resources
:
#
resources:
-
services
#
- services
verbs
:
#
verbs:
-
get
#
- get
-
list
#
- list
-
watch
#
- watch
-
apiGroups
:
#
- apiGroups:
-
networking.k8s.io
#
- networking.k8s.io
-
extensions
#
- extensions
resources
:
#
resources:
-
ingresses
#
- ingresses
verbs
:
#
verbs:
-
get
#
- get
-
list
#
- list
-
watch
#
- watch
-
apiGroups
:
#
- apiGroups:
-
"
"
#
- ""
resources
:
#
resources:
-
events
#
- events
verbs
:
#
verbs:
-
create
#
- create
-
patch
#
- patch
-
apiGroups
:
#
- apiGroups:
-
networking.k8s.io
#
- networking.k8s.io
-
extensions
#
- extensions
resources
:
#
resources:
-
ingresses/status
#
- ingresses/status
verbs
:
#
verbs:
-
update
#
- update
-
apiGroups
:
#
- apiGroups:
-
configuration.konghq.com
#
- configuration.konghq.com
resources
:
#
resources:
-
kongplugins
#
- kongplugins
-
kongcredentials
#
- kongcredentials
-
kongconsumers
#
- kongconsumers
-
kongingresses
#
- kongingresses
verbs
:
#
verbs:
-
get
#
- get
-
list
#
- list
-
watch
#
- watch
-
apiGroups
:
#
- apiGroups:
-
"
"
#
- ""
resourceNames
:
#
resourceNames:
-
ingress-controller-leader-kong
#
- ingress-controller-leader-kong
resources
:
#
resources:
-
configmaps
#
- configmaps
verbs
:
#
verbs:
-
get
#
- get
-
update
#
- update
-
apiGroups
:
#
- apiGroups:
-
"
"
#
- ""
resources
:
#
resources:
-
configmaps
#
- configmaps
verbs
:
#
verbs:
-
create
#
- create
---
#
---
apiVersion
:
rbac.authorization.k8s.io/v1beta1
#
apiVersion: rbac.authorization.k8s.io/v1beta1
kind
:
ClusterRoleBinding
#
kind: ClusterRoleBinding
metadata
:
#
metadata:
name
:
kong-ingress-clusterrole-nisa-binding
#
name: kong-ingress-clusterrole-nisa-binding
roleRef
:
#
roleRef:
apiGroup
:
rbac.authorization.k8s.io
#
apiGroup: rbac.authorization.k8s.io
kind
:
ClusterRole
#
kind: ClusterRole
name
:
kong-ingress-clusterrole
#
name: kong-ingress-clusterrole
subjects
:
#
subjects:
-
kind
:
ServiceAccount
#
- kind: ServiceAccount
name
:
kong-serviceaccount
#
name: kong-serviceaccount
namespace
:
kong
#
namespace: kong
---
#
---
apiVersion
:
v1
#
apiVersion: v1
data
:
#
data:
servers.conf
:
|
#
servers.conf: |
# Prometheus metrics server
#
# Prometheus metrics server
server {
#
server {
server_name kong_prometheus_exporter;
#
server_name kong_prometheus_exporter;
listen 0.0.0.0:9542; # can be any other port as well
#
listen 0.0.0.0:9542; # can be any other port as well
access_log off;
#
access_log off;
location /metrics {
#
location /metrics {
default_type text/plain;
#
default_type text/plain;
content_by_lua_block {
#
content_by_lua_block {
local prometheus = require "kong.plugins.prometheus.exporter"
#
local prometheus = require "kong.plugins.prometheus.exporter"
prometheus:collect()
#
prometheus:collect()
}
#
}
}
#
}
location /nginx_status {
#
location /nginx_status {
internal;
#
internal;
stub_status;
#
stub_status;
}
#
}
}
#
}
# Health check server
#
# Health check server
server {
#
server {
server_name kong_health_check;
#
server_name kong_health_check;
listen 0.0.0.0:9001; # can be any other port as well
#
listen 0.0.0.0:9001; # can be any other port as well
access_log off;
#
access_log off;
location /health {
#
location /health {
return 200;
#
return 200;
}
#
}
}
#
}
kong.yml
:
|
#
kong.yml: |
_format_version: "1.1"
#
_format_version: "1.1"
services:
#
services:
- name: chaolai.igirl-service.80
#
- name: chaolai.igirl-service.80
host: czhd.gongsibao.com
#
host: czhd.gongsibao.com
plugins:
#
plugins:
- name: prometheus
#
- name: prometheus
service: chaolai.igirl-service.80
#
service: chaolai.igirl-service.80
kind
:
ConfigMap
#
kind: ConfigMap
metadata
:
#
metadata:
name
:
kong-server-blocks
#
name: kong-server-blocks
namespace
:
kong
#
namespace: kong
---
#
---
apiVersion
:
v1
apiVersion
:
v1
kind
:
Service
kind
:
Service
metadata
:
metadata
:
...
...
yamls/kong/kong-proxy-db.yaml
View file @
91247767
...
@@ -13,7 +13,7 @@ spec:
...
@@ -13,7 +13,7 @@ spec:
port
:
80
port
:
80
protocol
:
TCP
protocol
:
TCP
targetPort
:
8000
targetPort
:
8000
nodePort
:
12345
nodePort
:
26981
-
name
:
proxy-ssl
-
name
:
proxy-ssl
port
:
443
port
:
443
protocol
:
TCP
protocol
:
TCP
...
@@ -91,7 +91,7 @@ spec:
...
@@ -91,7 +91,7 @@ spec:
value
:
0.0.0.0:8001, 0.0.0.0:8444 ssl
value
:
0.0.0.0:8001, 0.0.0.0:8444 ssl
-
name
:
KONG_PROXY_LISTEN
-
name
:
KONG_PROXY_LISTEN
value
:
0.0.0.0:8000, 0.0.0.0:8443 ssl http2
value
:
0.0.0.0:8000, 0.0.0.0:8443 ssl http2
image
:
kong:2.
0
image
:
registry.cn-beijing.aliyuncs.com/hantang2/imgshare:777.77.1
0
imagePullPolicy
:
IfNotPresent
imagePullPolicy
:
IfNotPresent
lifecycle
:
lifecycle
:
preStop
:
preStop
:
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment