配置片段的 kubernetes nginx 入口错误

Question

我有以下 ingress.yaml 文件

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
    name: nginx-configuration-snippet
    annotations:
        nginx.ingress.kubernetes.io/rewrite-target: /
        nginx.ingress.kubernetes.io/configuration-snippet: |
          location /base/path/v1/api/update {
              deny all;
              return 404;
            }
spec:
  rules:
    - http:
        paths:
          - path: /base/path(/|$)(.*)
            backend:
              serviceName: myApi
              servicePort: 8080

但是当我向 https:///base/path/v1/api/update 发送请求时，它成功了，我在 nginx 入口控制器中遇到了以下错误

Error: exit status 1
2020/08/06 18:35:07 [emerg] 1734#1734: location "/base/path/v1/api/update" is outside location "^/base/path(/|$)(.*)" in /tmp/nginx-cfg008325631:2445
nginx: [emerg] location "/base/path/v1/api/update" is outside location "^/base/path(/|$)(.*)" in /tmp/nginx-cfg008325631:2445
nginx: configuration file /tmp/nginx-cfg008325631 test failed

有人可以帮忙吗？

Answer 1

configuration-snippet 是将配置 添加到位置。

如果您想向 server context, you should use the server-snippet 添加自定义位置：

Using the annotation nginx.ingress.kubernetes.io/server-snippet it is possible to add custom configuration in the server configuration block.

您还需要使用一些修饰符和正则表达式来使其工作（~* 和 ^）。

以下配置应该有效：

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
    name: nginx-configuration-snippet
    annotations:
        nginx.ingress.kubernetes.io/rewrite-target: /
        nginx.ingress.kubernetes.io/server-snippet: |
          location ~* "^/base/path/v1/api/update" {
              deny all;
              return 403;
            }
spec:
  rules:
    - http:
        paths:
          - path: /base/path(/|$)(.*)
            backend:
              serviceName: myApi
              servicePort: 8080

最后的nginx.config应该是这样结束的：

$ kubectl exec -n kube-system nginx-ingress-controller-6fc5bcc8c9-chkxf -- cat /etc/nginx/nginx.conf

[...]

location ~* "^/base/path/v1/api/update" {
            deny all;
            return 403;
        }
        
location ~* "^/base/path(/|$)(.*)" {
[...]           
}

配置片段的 kubernetes nginx 入口错误

kubernetes nginx ingress error with configuration-snippet

nginx

kubernetes

kubernetes-helm

kubernetes-ingress

nginx-ingress