第 2 章 网络 Operator

流程

1. 以 admin 用户身份登录集群后，运行以下命令：

   $ export CLUSTER_NAME=$(oc get infrastructure cluster -o=jsonpath="{.status.infrastructureName}")
   $ export REGION=$(oc get infrastructure cluster -o=jsonpath="{.status.platformStatus.aws.region}")
   $ export OIDC_ENDPOINT=$(oc get authentication.config.openshift.io cluster -o jsonpath='{.spec.serviceAccountIssuer}' | sed  's|^https://||')
   $ export AWS_ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text)
   $ export SCRATCH="/tmp/${CLUSTER_NAME}/alb-operator"
   $ mkdir -p ${SCRATCH}

   Copy to Clipboard Toggle word wrap

2. 您可以运行以下命令来验证变量是否已设置：

   $ echo "Cluster name: ${CLUSTER_NAME}, Region: ${REGION}, OIDC Endpoint: ${OIDC_ENDPOINT}, AWS Account ID: ${AWS_ACCOUNT_ID}"

   Copy to Clipboard Toggle word wrap

   输出示例

   Cluster name: <cluster_id>, Region: us-east-2, OIDC Endpoint: oidc.op1.openshiftapps.com/<oidc_id>, AWS Account ID: <aws_id>

   Copy to Clipboard Toggle word wrap

流程

1. 将环境变量设置为 ROSA 部署的正确值：

   $ export VPC_ID=<vpc-id>
   $ export PUBLIC_SUBNET_IDS="<public-subnet-a-id> <public-subnet-b-id> <public-subnet-c-id>"
   $ export PRIVATE_SUBNET_IDS="<private-subnet-a-id> <private-subnet-b-id> <private-subnet-c-id>"

   Copy to Clipboard Toggle word wrap

2. 使用集群名称向集群的 VPC 添加标签：

   $ aws ec2 create-tags --resources ${VPC_ID} --tags Key=kubernetes.io/cluster/${CLUSTER_NAME},Value=owned --region ${REGION}

   Copy to Clipboard Toggle word wrap

3. 在您的公共子网中添加标签：

   $ aws ec2 create-tags \
        --resources ${PUBLIC_SUBNET_IDS} \
        --tags Key=kubernetes.io/role/elb,Value='' \
        --region ${REGION}

   Copy to Clipboard Toggle word wrap

4. 在您的专用子网中添加标签：

   $ aws ec2 create-tags \
        --resources ${PRIVATE_SUBNET_IDS} \
        --tags Key=kubernetes.io/role/internal-elb,Value='' \
        --region ${REGION}

   Copy to Clipboard Toggle word wrap

1. 创建一个新项目：

   $ oc new-project hello-world

   Copy to Clipboard Toggle word wrap

2. 部署 hello world 应用程序：

   $ oc new-app -n hello-world --image=docker.io/openshift/hello-openshift

   Copy to Clipboard Toggle word wrap

3. 为 AWS ALB 配置 NodePort 服务以连接：

   $ cat << EOF | oc apply -f -
   apiVersion: v1
   kind: Service
   metadata:
     name: hello-openshift-nodeport
     namespace: hello-world
   spec:
     ports:
       - port: 80
         targetPort: 8080
         protocol: TCP
     type: NodePort
     selector:
       deployment: hello-openshift
   EOF

   Copy to Clipboard Toggle word wrap

4. 使用 AWS Load Balancer Operator 部署 AWS ALB：

   $ cat << EOF | oc apply -f -
   apiVersion: networking.k8s.io/v1
   kind: Ingress
   metadata:
     name: hello-openshift-alb
     namespace: hello-world
     annotations:
       alb.ingress.kubernetes.io/scheme: internet-facing
   spec:
     ingressClassName: alb
     rules:
       - http:
           paths:
             - path: /
               pathType: Exact
               backend:
                 service:
                   name: hello-openshift-nodeport
                   port:
                     number: 80
   EOF

   Copy to Clipboard Toggle word wrap

5. curl AWS ALB Ingress 端点，以验证 hello world 应用程序是否可以访问：

   注意

   AWS ALB 置备需要几分钟时间。如果您收到一个错误，显示 curl: (6) Could not resolve host，请等待并重试。

   $ INGRESS=$(oc -n hello-world get ingress hello-openshift-alb \
       -o jsonpath='{.status.loadBalancer.ingress[0].hostname}')
   $ curl "http://${INGRESS}"

   Copy to Clipboard Toggle word wrap

   输出示例

   Hello OpenShift!

   Copy to Clipboard Toggle word wrap

6. 为您的 hello world 应用程序部署 AWS NLB：

   $ cat << EOF | oc apply -f -
   apiVersion: v1
   kind: Service
   metadata:
     name: hello-openshift-nlb
     namespace: hello-world
     annotations:
       service.beta.kubernetes.io/aws-load-balancer-type: external
       service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
       service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
   spec:
     ports:
       - port: 80
         targetPort: 8080
         protocol: TCP
     type: LoadBalancer
     selector:
       deployment: hello-openshift
   EOF

   Copy to Clipboard Toggle word wrap

7. 测试 AWS NLB 端点：

   注意

   NLB 置备需要几分钟时间。如果您收到一个错误，显示 curl: (6) Could not resolve host，请等待并重试。

   $ NLB=$(oc -n hello-world get service hello-openshift-nlb \
     -o jsonpath='{.status.loadBalancer.ingress[0].hostname}')
   $ curl "http://${NLB}"

   Copy to Clipboard Toggle word wrap

   输出示例

   Hello OpenShift!

   Copy to Clipboard Toggle word wrap