Question

我正在尝试使用alb Ingress控制器在eks上实现一个简单的“ hello world”。

我的目标是..

创建集群
部署入口以使用ELB进行访问

以下事情已经完成

创建的EKS集群
添加了“ alb入口控制器”

C:\workspace\eks>kubectl get po -n kube-system
NAME                                      READY   STATUS    RESTARTS   AGE
alb-ingress-controller-5f96d7df77-mdrw2   1/1     Running   0          4m1s

创建的应用程序如下

apiVersion: apps/v1
kind: Deployment
metadata:
  name: "2048-deployment"
  namespace: "2048-game"
  labels:
    app: "2048"
spec:
  replicas: 1
  selector:
    matchLabels:
      app: "2048"
  template:
    metadata:
      labels:
        app: "2048"
    spec:
      containers:
      - image: alexwhen/docker-2048
        imagePullPolicy: Always
        name: "2048"
        ports:
        - containerPort: 80

服务如下

apiVersion: v1
kind: Service
metadata:
  name: "service-2048"
  namespace: "2048-game"
spec:
  ports:
    - port: 80
      targetPort: 80
      protocol: TCP
  type: NodePort
  selector:
    app: "2048"

入口控制器如下

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: "2048-ingress"
  namespace: "2048-game"
  annotations:
    kubernetes.io/ingress.class: alb
    alb.ingress.kubernetes.io/scheme: internet-facing
  labels:
    app: 2048-ingress
spec:
  rules:
    - http:
        paths:
          - path: /*
            backend:
              serviceName: "service-2048"
              servicePort: 80

输出如下，没有使Host addess成为ELB，并且无法从外部访问

C:\sample>kubectl get ingress/2048-ingress -n 2048-game
NAME           HOSTS   ADDRESS   PORTS   AGE
2048-ingress   *                 80      71s

更新：

在alb-ingress-controller-5f96d7df77-mdrw2日志中发现以下错误。无法找到更改方式

 kubebuilder/controller "msg"="Reconciler error" "error"="failed to build LoadBalancer configuration due to failed to resolve 2 qualified subnet for ALB. Subnets must contains these tags: 'kubernetes.io/cluster/ascluster': ['shared' or 'owned'] and 'kubernetes.io/role/elb': ['' or '1']. See https://kubernetes-sigs.github.io/aws-alb-ingress-controller/guide/controller/config/#subnet-auto-discovery for more details. Resolved qualified subnets: '[]'"  "controller"="alb-ingress-controller" "request"={"Namespace":"default","Name":"ingress-default-dev"}

Answer 1

eks节点所在的子网应使用以下标记

https://docs.aws.amazon.com/eks/latest/userguide/network_reqs.html#vpc-subnet-tagging

Answer 2

如果您的子网未标记有kubernetes.io/cluster/<cluster-name>=shared等。您也可以尝试在入口文件注释中传递子网，如下所示：

alb.ingress.kubernetes.io/subnets: subnet-xxxxxx, subnet-xxxxxx

AWS EKS ALB入口控制器不起作用，并且主机未填充

2 个答案: