|NO.Z.00360|——————————|CloudNative|——|KuberNetes&运维.V76|——|IngressNginx.v12|基本认证|

一、Ingressnginx基本认证
### --- IngressNginx基本认证secret
~~~     创建Basic-auth配置文件

[root@k8s-master01 ~]# vim basic-aut.yaml
apiVersion: v1
data:
  auth: Zm9vOiRhcHIxJE9GRzNYeWJwJGNrTDBGSERBa29YWUlsSDkuY3lzVDAK
kind: Secret
metadata:
  name: basic-auth
type: Opaque
二、创建basic.secret
### --- 创建Basic-auth

[root@k8s-master01 ~]# kubectl create -f basic-aut.yaml -n kube-system
secret/basic-auth created
三、添加注释
### --- 在ingress上对应的域名上添加2个注释

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/auth-realm: Need to Login
    nginx.ingress.kubernetes.io/auth-secret: basic-auth
    nginx.ingress.kubernetes.io/auth-type: basic
    prometheus.io/http_probe: "true"
  name: ratel
  namespace: kube-system
spec:
  rules:
  - host: krm.test.com
    http:
      paths:
      - backend:
          serviceName: ratel
          servicePort: 8888
        path: /
        pathType: ImplementationSpecific
### --- 注:

prometheus.io/http_probe    true
nginx.ingress.kubernetes.io/auth-type    basic
 nginx.ingress.kubernetes.io/auth-secret    basic-auth
nginx.ingress.kubernetes.io/auth-realNeed to Login  
四、访问验证是否需要账户密码:通过浏览器访问:http://krm.test.com/    显示基本认证登录页面

 
 
 
 
 
 
 
 
 

Walter Savage Landor:strove with none,for none was worth my strife.Nature I loved and, next to Nature, Art:I warm'd both hands before the fire of life.It sinks, and I am ready to depart
                                                                                                                                                   ——W.S.Landor

 

 

posted on 2022-04-01 13:26  yanqi_vip  阅读(43)  评论(0)    收藏  举报

导航