概要

k8sテスト環境構築
Contour インストール

構築目次

全体目次

環境

Rancher: v2.5.7
kubernetes(Client): v1.20.5
kubernetes(Server): v1.20.5
Contour Chart: v4.2.2
Contour App: v1.14.0

インストール

作業場所: ClientPC
Contour Install Page
https://projectcontour.io/getting-started/
※インストール方法は3つあるが、ここではHelmでインストールする
Contour Chart Page
https://github.com/bitnami/charts/tree/master/bitnami/contour

helmにcontour repo追加

$ helm repo add bitnami https://charts.bitnami.com/bitnami
$ helm repo update

## 確認 ##
$ helm search repo bitnami/contour
NAME            CHART VERSION   APP VERSION DESCRIPTION                              
bitnami/contour 4.2.2           1.14.0      Contour Ingress controller for Kubernetes

helmでContour インストール

## namespace(projectcontour) 作成
$ kubectl create ns projectcontour
namespace/projectcontour created

## 「bitnami/contour」を指定名前(contour)で指定namespace(projectcontour)にインストール
$ helm install contour bitnami/contour -n projectcontour

## インストール後、確認
$ helm list -n projectcontour
NAME    NAMESPACE       REVISION    UPDATED                                 STATUS      CHART           APP VERSION
contour projectcontour  1           2021-04-08 23:18:38.944010107 +0900 JST deployed    contour-4.2.2   1.14.0

$ kubectl get deploy -n projectcontour
NAME              READY   UP-TO-DATE   AVAILABLE   AGE
contour-contour   2/2     2            2           45s

$ kubectl get get ds -n projectcontour
NAME            DESIRED   CURRENT   READY   UP-TO-DATE   AVAILABLE   NODE SELECTOR   AGE
contour-envoy   3         3         3       3            3           <none>          52s

$ kubectl get pod -n projectcontour
NAME                               READY   STATUS    RESTARTS   AGE
contour-contour-56cd8f64bf-cpsxk   1/1     Running   0          57s
contour-contour-56cd8f64bf-djmkp   1/1     Running   0          57s
contour-envoy-dzb79                2/2     Running   0          57s
contour-envoy-gt65w                2/2     Running   0          57s
contour-envoy-jvthk                2/2     Running   0          57s

$ kubectl get svc -n projectcontour
NAME            TYPE           CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
contour         ClusterIP      10.43.51.243    <none>        8001/TCP                     69s
contour-envoy   LoadBalancer   10.43.184.146   <pending>     80:31094/TCP,443:30716/TCP   69s

$ kubectl get sa -n projectcontour
NAME              SECRETS   AGE
contour-contour   1         83s
contour-envoy     1         83s
..........

$ kubectl secret -n projectcontour
NAME                            TYPE                                  DATA   AGE
contour-contour-token-jlr25     kubernetes.io/service-account-token   3      4h10m
contour-envoy-token-kks64       kubernetes.io/service-account-token   3      4h10m
contourcert                     kubernetes.io/tls                     3      4h10m
envoycert                       kubernetes.io/tls                     3      4h10m
sh.helm.release.v1.contour.v1   helm.sh/release.v1                    1      4h10m
..........

$ kubectl get cm -n projectcontour
NAME           DATA   AGE
contour        1      76s
leader-elect   0      74s

動作確認

PodとService作成

test-nginx.yaml

---
apiVersion: v1
kind: Service
metadata:
  name: nginx-svc
spec:
  selector:
    app: nginx
  ports:
  - name: http
    protocol: TCP
    port: 80
    targetPort: 80
---
apiVersion: v1
kind: Pod
metadata:
  name: nginx
  labels:
    app: nginx
spec:
  containers:
  - name: nginx
    image: nginx:1.19.9
    imagePullPolicy: IfNotPresent
    ports:
    - containerPort: 80

※Contourが提供するHTTPProxyリソース(CRD)を使用
→ Ingressリソースを使っても良い

HTTPProxy作成

test-httpproxy.yaml

apiVersion: projectcontour.io/v1
kind: HTTPProxy
metadata:
  name: contour-http-proxy
spec:
  virtualhost:
    fqdn: nginx-contour.test.local
  routes:
    - conditions:
      - prefix: /
      services:
        - name: nginx-svc
          port: 80

manifest適用

$ kubectl apply -f test-nginx.yaml
$ kubectl apply -f test-httpproxy.yaml

hosts 設定追加
Node IP(Worker node中1個)とIngressで設定したhostを紐づけ

$ cat /etc/hosts
........
192.168.245.103 nginx-contour.test.local
........

NodePort 確認
contour serviceのNodePortを確認（ここでは「31094」）

$ kubectl get svc -n projectcontour
NAME            TYPE           CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
contour         ClusterIP      10.43.51.243    <none>        8001/TCP                     69s
contour-envoy   LoadBalancer   10.43.184.146   <pending>     80:31094/TCP,443:30716/TCP   69s

接続確認

$ curl -I http://nginx-contour.test.local:31094/
HTTP/1.1 200 OK
.........

Ingressで確認

Ingress作成

test-ingress.yaml

## kubernetes v1.19以降用
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: contour-ingress
  annotations:
    kubernetes.io/ingress.class: contour ## contour classを指定
spec:
  rules:
  - host: nginx-contour.test.local
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: nginx-svc
            port:
              number: 80

manifest適用

## HTTPProxyリソース削除
$ kubectl delete -f test-httpproxy.yaml

## Ingressリソース作成
$ kubectl apply -f test-ingress.yaml

接続確認

$ curl -I http://nginx-contour.test.local:31094/
HTTP/1.1 200 OK
.........