[英]How do I setup ingress for HashiCorp Vault UI in Kubernetes
I have just installed an HashiCorp Vault on my Kubernetes cluster using.我刚刚在我的 Kubernetes 集群上安装了一个 HashiCorp Vault。 I want it to work through my existing ingress controller so I have created a new ingress rule using the yaml below:
我希望它通过我现有的入口控制器工作,所以我使用下面的 yaml 创建了一个新的入口规则:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: vault-ingress
namespace: vault
annotations:
nginx.ingress.kubernetes.io/rewrite-target: /
kubernetes.io/ingress.class: nginx
nginx.ingress.kubernetes.io/ssl-redirect: "false"
spec:
rules:
- http:
paths:
- path: /vault
backend:
serviceName: vault
servicePort: 8200
To my service which runs as:对于我的服务,它运行为:
apiVersion: v1
kind: Service
metadata:
name: vault
namespace: vault
labels:
module: vault
spec:
selector:
module: vault
ports:
- port: 8200
targetPort: 8200
However, when I try and access my URL: http://ingress.domain/vault/ui
I get empty page with errors但是,当我尝试访问我的 URL 时:
http://ingress.domain/vault/ui
我得到了错误的空页面
13.72.65.96/:24 GET http://ingress.domain/ui/assets/vendor-854d73b9f9351c0ff2e27f8821dfcd09.js net::ERR_ABORTED 404 (Not Found)
13.72.65.96/:25 GET http://ingress.domain/ui/assets/vault-f8ac2e61e061b2fb490b6ad79fcd5c1f.js net::ERR_ABORTED 404 (Not Found)
13.72.65.96/:15 GET http://ingress.domain/ui/assets/vendor-895fbba1663c3b4fe68755a3fb7ae7b4.css net::ERR_ABORTED 404 (Not Found)
13.72.65.96/:16 GET http://ingress.domain/ui/assets/vault-8ed265cce923599eca663b1bb2e4a83f.css net::ERR_ABORTED 404 (Not Found)
13.72.65.96/:25 GET http://ingress.domain/ui/assets/vault-f8ac2e61e061b2fb490b6ad79fcd5c1f.js net::ERR_ABORTED 404 (Not Found)
favicon-68e1a9c89026b0efeddf718a48c282a5.png:1
GET http://ingress.domain/ui/favicon-68e1a9c89026b0efeddf718a48c282a5.png 404 (Not Found)
My configmap:我的配置图:
apiVersion: v1
kind: ConfigMap
metadata:
name: vault
namespace: vault
labels:
module: vault
data:
config.json : '{
"ui": "true",
"disable_mlock": "true",
"api_addr": "http://127.0.0.1:8200/vault",
"listener": [
{
"tcp": {
"address": "0.0.0.0:8200",
"tls_disable": 1
}
}
]
}'
Deployment部署
apiVersion: apps/v1
kind: Deployment
metadata:
name: vault
namespace: vault
labels:
module: vault
spec:
selector:
matchLabels:
module: vault
replicas: 1
template:
metadata:
labels:
module: vault
spec:
containers:
- name: vault
image: vault
imagePullPolicy: "Always"
command: ["/bin/sh", "-c"]
args:
- vault server -config /vault/config/config.json
securityContext:
capabilities:
add:
- IPC_LOCK
volumeMounts:
- name: configurations
mountPath: /vault/config/config.json
subPath: config.json
env:
- name: VAULT_ADDR
value: "http://localhost:8200/vault/"
ports:
- containerPort: 8200
imagePullSecrets:
- name: regcred
volumes:
- name: configurations
configMap:
name: vault
ow do I setup ingress for Vault UI in Kubernetes?如何在 Kubernetes 中为 Vault UI 设置入口? I have one domain for my Ingress, so the UI (and other services) should be : http://ingress.domain/ {service name}.
我的 Ingress 有一个域,因此 UI(和其他服务)应该是: http://ingress.domain/ {service name}。 I need the Vault UI http://ingress.domain/vault
我需要 Vault UI http://ingress.domain/vault
I've got response on Vault forum :我在Vault 论坛上得到了回应:
this is (currently) not possible.
这是(目前)不可能的。 Vault's UI (and API) is not able to work with domain subpathing.
Vault 的 UI(和 API)无法与域子路径一起使用。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.