1

base/basic-auth/http-basic-auth.yaml

@@ -4,6 +4,5 @@ metadata:
   name: basic-auth
 type: Opaque
 data:
-  auth: dXNlcjokYXByMSRPU0JHSXpFbCRFemNTTGk1QkJWVGFBQlhMODlNaXkvCg==
-# This is a base64 encoded string of the format "user:$apr1$OSBGIzEl$EzcSLi5BBVTaABXL89Miy/".
-# password: FVhxOBuqXK800gdmIq
+  auth: YWRtaW46JGFwcjEkc1hKSE1BdXIkQlE1MU1jRm5NWVA1WjFRZk13NXZyMA==
+# user: admin, password: 88888888

gp2523/ingress-admin.yaml

@@ -0,0 +1,76 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: gp-ingress
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
+    nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
+#    nginx.ingress.kubernetes.io/auth-tls-secret: "gp2523/ca-secret"
+#    nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
+#    nginx.ingress.kubernetes.io/auth-tls-verify-depth: "2"
+#    nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
+#    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+#    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+#    nginx.ingress.kubernetes.io/auth-type: "basic"
+#    nginx.ingress.kubernetes.io/auth-secret: "basic-auth"
+#    nginx.ingress.kubernetes.io/auth-realm: "Authentication Required"
+spec:
+  tls:
+    - hosts:
+        - api-g2523.qq.com
+        - h5-g2523.qq.com
+        - down-g2523.qq.com
+      secretName: tls-secret
+  rules:
+    - host: api-g2523.qq.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: stock2-java-api-service
+                port:
+                  number: 80
+          - path: /api/market
+            pathType: Prefix
+            backend:
+              service:
+                name: haproxy-service
+                port:
+                  number: 8188
+    - host: h5-g2523.qq.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: stock2-web-h5-service
+                port:
+                  number: 80
+          - path: /api
+            pathType: Prefix
+            backend:
+              service:
+                name: stock2-java-api-service
+                port:
+                  number: 80
+          - path: /api/market
+            pathType: Prefix
+            backend:
+              service:
+                name: haproxy-service
+                port:
+                  number: 8188
+    - host: down-g2523.qq.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: download-cos-proxy-service
+                port:
+                  number: 80

gp2523/kustomization.yaml

@@ -15,6 +15,7 @@ resources:
   - ../base/basic-auth
   - ../base/haproxy
   - ingress.yaml
+  - ingress-admin.yaml
 
 configMapGenerator:
   - name: mysql-configmap

gp2524/ingress-admin.yaml

@@ -0,0 +1,76 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: gp-ingress
+  annotations:
+    kubernetes.io/ingress.class: "nginx"
+    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
+    nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
+#    nginx.ingress.kubernetes.io/auth-tls-secret: "gp2524/ca-secret"
+#    nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
+#    nginx.ingress.kubernetes.io/auth-tls-verify-depth: "2"
+#    nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
+#    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+#    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+#    nginx.ingress.kubernetes.io/auth-type: "basic"
+#    nginx.ingress.kubernetes.io/auth-secret: "basic-auth"
+#    nginx.ingress.kubernetes.io/auth-realm: "Authentication Required"
+spec:
+  tls:
+    - hosts:
+        - api-g2524.qq.com
+        - h5-g2524.qq.com
+        - down-g2524.qq.com
+      secretName: tls-secret
+  rules:
+    - host: api-g2524.qq.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: stock2-java-api-service
+                port:
+                  number: 80
+          - path: /api/market
+            pathType: Prefix
+            backend:
+              service:
+                name: haproxy-service
+                port:
+                  number: 8188
+    - host: h5-g2524.qq.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: stock2-web-h5-service
+                port:
+                  number: 80
+          - path: /api
+            pathType: Prefix
+            backend:
+              service:
+                name: stock2-java-api-service
+                port:
+                  number: 80
+          - path: /api/market
+            pathType: Prefix
+            backend:
+              service:
+                name: haproxy-service
+                port:
+                  number: 8188
+    - host: down-g2524.qq.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: download-cos-proxy-service
+                port:
+                  number: 80

gp2524/kustomization.yaml

@@ -15,6 +15,7 @@ resources:
   - ../base/basic-auth
   - ../base/haproxy
   - ingress.yaml
+  - ingress-admin.yaml
 
 configMapGenerator:
   - name: mysql-configmap

gp2525/ingress-admin.yaml

@@ -12,9 +12,9 @@ metadata:
 #    nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
 #    nginx.ingress.kubernetes.io/ssl-redirect: "true"
 #    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-#    nginx.ingress.kubernetes.io/auth-type: "basic"
-#    nginx.ingress.kubernetes.io/auth-secret: "basic-auth"
-#    nginx.ingress.kubernetes.io/auth-realm: "Authentication Required"
+    nginx.ingress.kubernetes.io/auth-type: "basic"
+    nginx.ingress.kubernetes.io/auth-secret: "basic-auth"
+    nginx.ingress.kubernetes.io/auth-realm: "Authentication Required"
 spec:
   tls:
     - hosts:

gp2525/kustomization.yaml

@@ -15,6 +15,7 @@ resources:
   - ../base/basic-auth
   - ../base/haproxy
   - ingress.yaml
+  - ingress-admin.yaml
 
 configMapGenerator:
   - name: mysql-configmap