---

[CloudNative：KuberNetes&運維.V76]                                                                      [Applications.KuberNetes] [|DevOps|k8s|k8s運維|**3節點.V1**|IngressNginx基本認證|]

---

---

一、Ingressnginx基本認證

### --- IngressNginx基本認證secret
~~~     建立Basic-auth配置檔案

[root@k8s-master01 ~]# vim basic-aut.yaml
apiVersion: v1
data:
  auth: Zm9vOiRhcHIxJE9GRzNYeWJwJGNrTDBGSERBa29YWUlsSDkuY3lzVDAK
kind: Secret
metadata:
  name: basic-auth
type: Opaque
 

二、建立basic.secret

### --- 建立Basic-auth

[root@k8s-master01 ~]# kubectl create -f basic-aut.yaml -n kube-system
secret/basic-auth created

三、添加註釋

### --- 在ingress上對應的域名上新增2個註釋

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/auth-realm: Need to Login
    nginx.ingress.kubernetes.io/auth-secret: basic-auth
    nginx.ingress.kubernetes.io/auth-type: basic
    prometheus.io/http_probe: "true"
  name: ratel
  namespace: kube-system
spec:
  rules:
  - host: krm.test.com
    http:
      paths:
      - backend:
          serviceName: ratel
          servicePort: 8888
        path: /
        pathType: ImplementationSpecific
 

### --- 注：

prometheus.io/http_probe    true
nginx.ingress.kubernetes.io/auth-type    basic
 nginx.ingress.kubernetes.io/auth-secret    basic-auth
nginx.ingress.kubernetes.io/auth-realNeed to Login  

四、訪問驗證是否需要賬戶密碼：通過瀏覽器訪問：http://krm.test.com/    顯示基本認證登入頁面

---

===============================END===============================

---

Walter Savage Landor:strove with none,for none was worth my strife.Nature I loved and, next to Nature, Art:I warm'd both hands before the fire of life.It sinks, and I am ready to depart                                                                                                                                                    ——W.S.Landor

---

來自為知筆記(Wiz)