用 nginx-ingress controller 重写

Question

我正在使用 nginx-ingress controller 在 Kubernetes 内部的端口上运行 celery 花

我想根据他们的文档对 /flower/(.*) 请求的请求转到 /$1 进行重写： https://flower.readthedocs.io/en/latest/config.html?highlight=nginx#url-字首

server {
    listen 80;
    server_name example.com;

    location /flower/ {
        rewrite ^/flower/(.*)$ /$1 break;
        proxy_pass http://example.com:5555;
        proxy_set_header Host $host;
    }

}

我想出了以下入口。yaml

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: backend-airflow-ingress
  namespace: edna
  annotations:
    kubernetes.io/ingress.class: "nginx"
    nginx.ingress.kubernetes.io/use-regex: "true"
    ingress.kubernetes.io/rewrite-target: /$2
    # nginx.ingress.kubernetes.io/app-root: /flower
spec:
  rules:
  - host:
    http:
      paths:
      - path: /flower(/|$)(.*)
        backend:
          serviceName: airflow-flower-service
          servicePort: 5555

在POD运行花里面，我成功得到

curl localhost:5555/dashboard

但是，如果进入运行 Nginx controller 的 POD，则会失败。

curl localhost/flower/dashboard

我得到花的回应：

<div class="span12">
<p>

Error, page not found

</p>
</div>

这是我在 nginx-controller pod 中的 nginx.conf 中看到的

server {                                                                                                                                                           
                server_name _ ;                                                                                                                                            
                                                                                                                                                                           
                listen 80 default_server reuseport backlog=511 ;                                                                                                           
                listen 443 default_server reuseport backlog=511 ssl http2 ;                                                                                                
                                                                                                                                                                           
                set $proxy_upstream_name "-";                                                                                                                              
                                                                                                                                                                           
                ssl_certificate_by_lua_block {                                                                                                                             
                        certificate.call()                                                                                                                                 
                }                                                                                                                                                          
                                                                                                                                                                           
                location ~* "^/flower(/|$)(.*)" {                                                                                                                          
                                                                                                                                                                           
                        set $namespace      "edna";                                                                                                                        
                        set $ingress_name   "backend-airflow-ingress";                                                                                                     
                        set $service_name   "";                                                                                                                            
                        set $service_port   "";                                                                                                                            
                set $location_path  "/flower(/|${literal_dollar})(.*)";                                                                                                    
                                                                                                                                                                           
                        rewrite_by_lua_block {                                                                                                                             
                                lua_ingress.rewrite({                                                                                                                      
                                        force_ssl_redirect = false,                                                                                                        
                                        ssl_redirect = true,                                                                                                               
                                        force_no_ssl_redirect = false,                                                                                                     
                                        use_port_in_redirects = false,                                                                                                     
                                })                                                                                                                                         
                                balancer.rewrite()                                                                                                                         
                                plugins.run()                                                                                                                              
                        }                                                                                                                                                  
                                                                                                                                                                           
                        # be careful with `access_by_lua_block` and `satisfy any` directives as satisfy any                                                                
                        # will always succeed when there's `access_by_lua_block` that does not have any lua code doing `ngx.exit(ngx.DECLINED)`                            
                        # other authentication method such as basic auth or external auth useless - all requests will be allowed.                                          
                        #access_by_lua_block {                                                                                                                             
                        #}                                                                                                                                                 
                                                                                                                                                                           
                        header_filter_by_lua_block {                                                                                                                       
                                lua_ingress.header()                                                                                                                       
                                plugins.run()                                                                                                                              
                        }                                                                                                                                                  
                                                                                                                                                                           
                        body_filter_by_lua_block {                                                                                                                         
                        }             

Answer 1

好的，想通了

ingress.kubernetes.io/rewrite-target: /$2

在我的情况下应该是一个不同的注释

nginx.ingress.kubernetes.io/rewrite-target: /$2