synchronization

网关/Ingress/Ingress公开TCP和UDP服务.md

@@ -0,0 +1,46 @@
+> 本文作者：丁辉
+
+# Ingress公开TCP和UDP服务
+
+[官方文档](https://kubernetes.github.io/ingress-nginx/user-guide/exposing-tcp-udp-services/)
+
+1. 添加 Ingress 启动参数
+
+   ```yaml
+   - --tcp-services-configmap=$(POD_NAMESPACE)/ingress-nginx-tcp
+   - --udp-services-configmap=$(POD_NAMESPACE)/ingress-nginx-udp
+   ```
+
+2. 创建 Configmap
+
+   > 格式为：<service port>:<namespace/service name>:[PROXY]:[PROXY]
+
+   - TCP
+
+     ```yaml
+     cat <<EOF | kubectl apply -f -
+     apiVersion: v1
+     kind: ConfigMap
+     metadata:
+       name: ingress-nginx-tcp
+       namespace: default
+     data:
+       9000: "default/example-go:8080"
+     EOF
+     ```
+
+   - UDP
+
+     ```yaml
+     cat <<EOF | kubectl apply -f -
+     apiVersion: v1
+     kind: ConfigMap
+     metadata:
+       name: ingress-nginx-udp
+       namespace: default
+     data:
+       53: "kube-system/kube-dns:53"
+     EOF
+     ```
+
+3. 创建完 Configmap 后即可测试访问对应端口

网关/Ingress/Ingress问题记录.md

@@ -0,0 +1,38 @@
+> 本文作者：丁辉
+
+# Ingress问题记录
+
+> 重启 ingress 控制器后报错
+
+```bash
+-------------------------------------------------------------------------------
+NGINX Ingress controller
+  Release:       v1.10.1
+  Build:         4fb5aac1dd3669daa3a14d9de3e3cdb371b4c518
+  Repository:    https://github.com/kubernetes/ingress-nginx
+  nginx version: nginx/1.25.3
+
+-------------------------------------------------------------------------------
+
+F0504 11:14:47.852320       7 main.go:64] port 80 is already in use. Please check the flag --http-port
+```
+
+**解决方法**
+
+> 允许从端口 1 开始的所有端口都可以被非特权用户使用
+
+- 临时解决
+
+  ```bash
+  sysctl -w net.ipv4.ip_unprivileged_port_start=1
+  ```
+
+- 永久
+
+  ```bash
+  echo 'net.ipv4.ip_unprivileged_port_start = 1' > /etc/sysctl.d/ip_unprivileged_port_start.conf
+  ```
+
+**总结**
+
+这根本就是权限问题, 而官方的报错存在误导性。很让人生气啊, 硬生生看了一下午。

网关/Ingress/README.md

@@ -0,0 +1,9 @@
+> 本文作者：丁辉
+
+#  Helm部署Nginx-Ingress
+
+> 相关文档地址
+
+**查看此篇文章**
+
+[Helm部署Nginx-Ingress](https://gitee.com/offends/Kubernetes/blob/main/Helm/Helm%E9%83%A8%E7%BD%B2Nginx-Ingress.md)