Skip to content

K
k8syml
Commit f660253a by 蒋勇
Options

d

parent 21409d6c
Showing with 817 additions and 24 deletions
yamls/kong/konga-dashboard.yaml 0 → 100644
apiVersion: v1
kind: Service
metadata:
labels:
app: konga
name: konga
namespace: kong
spec:
type: NodePort
ports:
- name: konga
port: 80
targetPort: 1337
selector:
app: konga
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: konga
namespace: kong
labels:
app: konga
spec:
replicas: 1
selector:
matchLabels:
app: konga
template:
metadata:
labels:
name: konga
app: konga
spec:
containers:
- name: konga
image: pantsel/konga
env:
- name: DB_DATABASE
value: k8s_konga
- name: DB_USER
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_USER
- name: DB_PASSWORD
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_PWD
- name: DB_PORT
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_PORT
- name: DB_ADAPTER
value: mysql
- name: DB_HOST
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_HOST
- name: NODE_ENV
value: development
- name: TOKEN_SECRET
value: testtoken
ports:
- name: konga
containerPort: 1337
yamls/kong/kongdbconfig.yaml
......@@ -15,6 +15,3 @@ data:
PAAS_DB_NAME: paas
PAAS_REDIS_DB: "14"
NODE_PORT: "80"
yamls/migrate/kong/1kong-namespace.yaml 0 → 100644
apiVersion: v1
kind: Namespace
metadata:
name: kong
\ No newline at end of file
yamls/migrate/kong/2custom-resources.yaml 0 → 100644
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: kongconsumers.configuration.konghq.com
spec:
additionalPrinterColumns:
- JSONPath: .username
description: Username of a Kong Consumer
name: Username
type: string
- JSONPath: .metadata.creationTimestamp
description: Age
name: Age
type: date
group: configuration.konghq.com
names:
kind: KongConsumer
plural: kongconsumers
shortNames:
- kc
scope: Namespaced
validation:
openAPIV3Schema:
properties:
credentials:
items:
type: string
type: array
custom_id:
type: string
username:
type: string
version: v1
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: kongcredentials.configuration.konghq.com
spec:
additionalPrinterColumns:
- JSONPath: .type
description: Type of credential
name: Credential-type
type: string
- JSONPath: .metadata.creationTimestamp
description: Age
name: Age
type: date
- JSONPath: .consumerRef
description: Owner of the credential
name: Consumer-Ref
type: string
group: configuration.konghq.com
names:
kind: KongCredential
plural: kongcredentials
scope: Namespaced
validation:
openAPIV3Schema:
properties:
consumerRef:
type: string
type:
type: string
required:
- consumerRef
- type
version: v1
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: kongingresses.configuration.konghq.com
spec:
group: configuration.konghq.com
names:
kind: KongIngress
plural: kongingresses
shortNames:
- ki
scope: Namespaced
validation:
openAPIV3Schema:
properties:
proxy:
properties:
connect_timeout:
minimum: 0
type: integer
path:
pattern: ^/.*$
type: string
protocol:
enum:
- http
- https
- grpc
- grpcs
type: string
read_timeout:
minimum: 0
type: integer
retries:
minimum: 0
type: integer
write_timeout:
minimum: 0
type: integer
type: object
route:
properties:
headers:
additionalProperties:
items:
type: string
type: array
type: object
https_redirect_status_code:
type: integer
methods:
items:
type: string
type: array
preserve_host:
type: boolean
protocols:
items:
enum:
- http
- https
- grpc
- grpcs
type: string
type: array
regex_priority:
type: integer
strip_path:
type: boolean
upstream:
properties:
algorithm:
enum:
- round-robin
- consistent-hashing
- least-connections
type: string
hash_fallback:
type: string
hash_fallback_header:
type: string
hash_on:
type: string
hash_on_cookie:
type: string
hash_on_cookie_path:
type: string
hash_on_header:
type: string
healthchecks:
properties:
active:
properties:
concurrency:
minimum: 1
type: integer
healthy:
properties:
http_statuses:
items:
type: integer
type: array
interval:
minimum: 0
type: integer
successes:
minimum: 0
type: integer
type: object
http_path:
pattern: ^/.*$
type: string
timeout:
minimum: 0
type: integer
unhealthy:
properties:
http_failures:
minimum: 0
type: integer
http_statuses:
items:
type: integer
type: array
interval:
minimum: 0
type: integer
tcp_failures:
minimum: 0
type: integer
timeout:
minimum: 0
type: integer
type: object
type: object
passive:
properties:
healthy:
properties:
http_statuses:
items:
type: integer
type: array
interval:
minimum: 0
type: integer
successes:
minimum: 0
type: integer
type: object
unhealthy:
properties:
http_failures:
minimum: 0
type: integer
http_statuses:
items:
type: integer
type: array
interval:
minimum: 0
type: integer
tcp_failures:
minimum: 0
type: integer
timeout:
minimum: 0
type: integer
type: object
type: object
type: object
slots:
minimum: 10
type: integer
type: object
version: v1
---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
name: kongplugins.configuration.konghq.com
spec:
additionalPrinterColumns:
- JSONPath: .plugin
description: Name of the plugin
name: Plugin-Type
type: string
- JSONPath: .metadata.creationTimestamp
description: Age
name: Age
type: date
- JSONPath: .disabled
description: Indicates if the plugin is disabled
name: Disabled
priority: 1
type: boolean
- JSONPath: .config
description: Configuration of the plugin
name: Config
priority: 1
type: string
group: configuration.konghq.com
names:
kind: KongPlugin
plural: kongplugins
shortNames:
- kp
scope: Namespaced
validation:
openAPIV3Schema:
properties:
config:
type: object
disabled:
type: boolean
plugin:
type: string
protocols:
items:
enum:
- http
- https
- tcp
- tls
type: string
type: array
run_on:
enum:
- first
- second
- all
type: string
required:
- plugin
version: v1
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: kong-serviceaccount
namespace: kong
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
name: kong-ingress-clusterrole
rules:
- apiGroups:
- ""
resources:
- endpoints
- nodes
- pods
- secrets
verbs:
- list
- watch
- apiGroups:
- ""
resources:
- nodes
verbs:
- get
- apiGroups:
- ""
resources:
- services
verbs:
- get
- list
- watch
- apiGroups:
- networking.k8s.io
- extensions
resources:
- ingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- networking.k8s.io
- extensions
resources:
- ingresses/status
verbs:
- update
- apiGroups:
- configuration.konghq.com
resources:
- kongplugins
- kongcredentials
- kongconsumers
- kongingresses
verbs:
- get
- list
- watch
- apiGroups:
- ""
resourceNames:
- ingress-controller-leader-kong
resources:
- configmaps
verbs:
- get
- update
- apiGroups:
- ""
resources:
- configmaps
verbs:
- create
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: kong-ingress-clusterrole-nisa-binding
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: kong-ingress-clusterrole
subjects:
- kind: ServiceAccount
name: kong-serviceaccount
namespace: kong
yamls/migrate/kong/3kongconfigmap.yaml 0 → 100644
apiVersion: v1
data:
servers.conf: |
# Prometheus metrics server
server {
server_name kong_prometheus_exporter;
listen 0.0.0.0:9542; # can be any other port as well
access_log off;
location /metrics {
default_type text/plain;
content_by_lua_block {
local prometheus = require "kong.plugins.prometheus.exporter"
prometheus:collect()
}
}
location /nginx_status {
internal;
stub_status;
}
}
# Health check server
server {
server_name kong_health_check;
listen 0.0.0.0:9001; # can be any other port as well
access_log off;
location /health {
return 200;
}
}
kind: ConfigMap
metadata:
name: kong-server-blocks
namespace: kong
---
apiVersion: v1
kind: ConfigMap
metadata:
name: zhichan-config
namespace: kong
data:
APP_ENV: prod
DB_HOST: 47.95.76.74
DB_PORT: "3306"
DB_USER: root
DB_PWD: Gongsibao2018
REDIS_HOST: r-2ze60261d9063784.redis.rds.aliyuncs.com
REDIS_PORT: "6379"
REDIS_PWD: Gongsibao2018
PAAS_DB_NAME: paas
PAAS_REDIS_DB: "14"
NODE_PORT: "80"
yamls/kong/kong-dashboard.yaml → yamls/migrate/kong/4kong-db.yaml
apiVersion: v1
kind: Service
metadata:
name: kong-dashboard
name: kong-dbservice
namespace: kong
spec:
type: NodePort
type: ClusterIP
ports:
- name: kong-dashboard
port: 80
targetPort: 8080
protocol: TCP
- name: kong-dbservice
port: 5432
targetPort: 5432
protocol: TCP
selector:
app: dashboard
app: kong-db
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: dashboard
name: kong-db
namespace: kong
spec:
template:
metadata:
labels:
name: dashboard
app: dashboard
name: kong-db
app: kong-db
spec:
containers:
- name: kong-dashboard
args:
- start
- --kong-url http://kong-proxy:8001
- --basic-auth admin=admin
image: pgbi/kong-dashboard:latest
ports:
- name: http
containerPort: 8080
protocol: TCP
- name: kong-db
image: registry.cn-beijing.aliyuncs.com/hantang2/staticngnix:kongdb0809
ports:
- name: tcp
containerPort: 5432
protocol: TCP
yamls/migrate/kong/5kong-proxy-db.yaml 0 → 100644
apiVersion: v1
kind: Service
metadata:
annotations:
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
service.beta.kubernetes.io/aws-load-balancer-type: nlb
name: kong-dbproxy
namespace: kong
spec:
#externalTrafficPolicy: Local
ports:
- name: proxy
port: 80
protocol: TCP
targetPort: 8000
nodePort: 26981
- name: proxy-ssl
port: 443
protocol: TCP
targetPort: 8443
- name: admin-url
port: 8001
protocol: TCP
targetPort: 8001
- name: promscratch
port: 9542
protocol: TCP
selector:
app: ingress-dbkong
type: NodePort
---
apiVersion: v1
kind: Service
metadata:
name: kong-validation-webhook
namespace: kong
spec:
ports:
- name: webhook
port: 443
protocol: TCP
targetPort: 8080
selector:
app: ingress-dbkong
---
apiVersion: apps/v1
kind: Deployment
metadata:
labels:
app: ingress-dbkong
name: ingress-dbkong
namespace: kong
spec:
replicas: 1
selector:
matchLabels:
app: ingress-dbkong
template:
metadata:
annotations:
prometheus.io/port: "9542"
prometheus.io/scrape: "true"
traffic.sidecar.istio.io/includeInboundPorts: ""
labels:
app: ingress-dbkong
spec:
containers:
- env:
- name: KONG_DATABASE
value: postgres
- name: KONG_PG_HOST
value: kong-dbservice
- name: KONG_PG_DATABASE
value: kong
- name: KONG_PG_USER
value: kong
- name: KONG_PG_PASSWORD
value: "123456"
- name: KONG_PG_PORT
value: "5432"
- name: KONG_NGINX_WORKER_PROCESSES
value: "1"
- name: KONG_NGINX_HTTP_INCLUDE
value: /kong/servers.conf
- name: KONG_ADMIN_ACCESS_LOG
value: /dev/stdout
- name: KONG_ADMIN_ERROR_LOG
value: /dev/stderr
- name: KONG_ADMIN_LISTEN
value: 0.0.0.0:8001, 0.0.0.0:8444 ssl
- name: KONG_PROXY_LISTEN
value: 0.0.0.0:8000, 0.0.0.0:8443 ssl http2
image: registry.cn-beijing.aliyuncs.com/hantang2/imgshare:777.77.10
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
exec:
command:
- /bin/sh
- -c
- kong quit
livenessProbe:
failureThreshold: 3
httpGet:
path: /health
port: 9001
scheme: HTTP
initialDelaySeconds: 30
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: proxy
ports:
- containerPort: 8000
name: proxy
protocol: TCP
- containerPort: 8443
name: proxy-ssl
protocol: TCP
- containerPort: 8001
name: admin-url
protocol: TCP
- containerPort: 9542
name: metrics
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /health
port: 9001
scheme: HTTP
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
securityContext:
runAsUser: 1000
volumeMounts:
- mountPath: /kong
name: kong-server-blocks
resources:
requests:
cpu: 100m
memory: 512Mi
limits:
cpu: 500m
memory: 2500Mi
- args:
- /kong-ingress-controller
- --kong-url=https://localhost:8444
- --admin-tls-skip-verify
- --publish-service=kong/kong-dbproxy
env:
- name: POD_NAME
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.name
- name: POD_NAMESPACE
valueFrom:
fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
image: registry.cn-beijing.aliyuncs.com/hantang2/staticngnix:ingctl
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
name: ingress-controller
ports:
- containerPort: 8080
name: webhook
protocol: TCP
readinessProbe:
failureThreshold: 3
httpGet:
path: /healthz
port: 10254
scheme: HTTP
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
serviceAccountName: kong-serviceaccount
volumes:
- configMap:
name: kong-server-blocks
name: kong-server-blocks
#docker run --rm -e "KONG_DATABASE=postgres" -e "KONG_PG_HOST=10.254.220.170" -e "KONG_PG_PORT=5432" -e "KONG_PG_DATABASE=kong" -e "KONG_PG_USER=kong" -e "KONG_PG_PASSWORD=kong" kong:2.0 kong migrations bootstrap
# docker run --rm -e "KONG_DATABASE=postgres" -e "KONG_PG_HOST=10.254.220.170" -e "KONG_PG_PORT=5432" -e "KONG_PG_DATABASE=kong" -e "KONG_PG_USER=kong" -e "KONG_PG_PASSWORD=kong" kong:2.0 kong migrations up
yamls/migrate/kong/6konga-dashboard.yaml 0 → 100644
apiVersion: v1
kind: Service
metadata:
labels:
app: konga
name: konga
namespace: kong
spec:
type: NodePort
ports:
- name: konga
port: 80
targetPort: 1337
selector:
app: konga
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: konga
namespace: kong
labels:
app: konga
spec:
replicas: 1
selector:
matchLabels:
app: konga
template:
metadata:
labels:
name: konga
app: konga
spec:
containers:
- name: konga
image: pantsel/konga
env:
- name: DB_DATABASE
value: k8s_konga2
- name: DB_USER
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_USER
- name: DB_PASSWORD
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_PWD
- name: DB_PORT
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_PORT
- name: DB_ADAPTER
value: mysql
- name: DB_HOST
valueFrom:
configMapKeyRef:
name: zhichan-config
key: DB_HOST
- name: NODE_ENV
value: development
- name: TOKEN_SECRET
value: testtoken
ports:
- name: konga
containerPort: 1337
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment