{"id":91173,"date":"2025-01-04T03:45:34","date_gmt":"2025-01-04T00:15:34","guid":{"rendered":"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/"},"modified":"2025-01-04T03:45:34","modified_gmt":"2025-01-04T00:15:34","slug":"cka-recap-ingress-networkpolicy-2pc","status":"publish","type":"post","link":"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/","title":{"rendered":"CKA Recap &#8212; \u0648\u0631\u0648\u062f \u0648 \u0633\u06cc\u0627\u0633\u062a \u0634\u0628\u06a9\u0647"},"content":{"rendered":"<div data-article-id=\"2188149\" id=\"article-body\">\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter-rtl ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0641\u0647\u0631\u0633\u062a \u0645\u0637\u0627\u0644\u0628<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u062a\u063a\u06cc\u06cc\u0631 \u0648\u0636\u0639\u06cc\u062a \u0641\u0647\u0631\u0633\u062a \u0645\u0637\u0627\u0644\u0628\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/#%D9%88%D8%B1%D9%88%D8%AF\" >\u0648\u0631\u0648\u062f<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/#%D8%AA%D8%A3%DB%8C%DB%8C%D8%AF\" >\u062a\u0623\u06cc\u06cc\u062f<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/#1_%DA%A9%D9%86%D8%AA%D8%B1%D9%84_%DA%A9%D9%86%D9%86%D8%AF%D9%87_%D9%88%D8%B1%D9%88%D8%AF%DB%8C_%D9%86%D8%B5%D8%A8_%D8%B4%D8%AF%D9%87_%D8%B1%D8%A7_%D8%A8%D8%B1%D8%B1%D8%B3%DB%8C_%DA%A9%D9%86%DB%8C%D8%AF\" >1. \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0648\u0631\u0648\u062f\u06cc \u0646\u0635\u0628 \u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/#2_IP%D8%8C_%D8%AF%D8%A7%D9%85%D9%86%D9%87%D8%8C_%D9%BE%D9%88%D8%B1%D8%AA_%D8%B1%D8%A7_%D8%A8%D8%B1%D8%B1%D8%B3%DB%8C_%DA%A9%D9%86%DB%8C%D8%AF\" >2. IP\u060c \u062f\u0627\u0645\u0646\u0647\u060c \u067e\u0648\u0631\u062a \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/#3_IP%D9%85%D8%B3%DB%8C%D8%B1_%D9%88%D8%B1%D9%88%D8%AF%DB%8C_%D9%BE%DB%8C%DA%86%DB%8C%D8%AF%DA%AF%DB%8C\" >3. IP\/\u0645\u0633\u06cc\u0631 \u0648\u0631\u0648\u062f\u06cc \u067e\u06cc\u0686\u06cc\u062f\u06af\u06cc<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/#NetworkPolicy\" >NetworkPolicy<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/nabfollower.com\/blog\/cka-recap-ingress-networkpolicy-2pc\/#%D8%AA%D8%A3%DB%8C%DB%8C%D8%AF-2\" >\u062a\u0623\u06cc\u06cc\u062f<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"%D9%88%D8%B1%D9%88%D8%AF\"><\/span>\n<p>  \u0648\u0631\u0648\u062f<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>\u0648\u0631\u0648\u062f \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0627\u0631\u062c\u06cc: <code>domain_name:port\/path<\/code>\n<\/li>\n<li>\u0632\u0645\u06cc\u0646\u0647:\n<ul>\n<li><code>rules.ingressClassName<\/code><\/li>\n<li>\n<code>path<\/code>  -> \u0645\u0633\u06cc\u0631<\/li>\n<li>\n<code>backend.service.name<\/code>  -> \u062e\u062f\u0645\u0627\u062a<\/li>\n<li>\n<code>port<\/code>  -> \u067e\u0648\u0631\u062a \u0633\u0631\u0648\u06cc\u0633<\/li>\n<li>\n<code>host<\/code>  -> \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight yaml\"><code><span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">networking.k8s.io\/v1<\/span>\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Ingress<\/span>\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">ingress-wildcard-host<\/span>\n  <span class=\"na\">annotations<\/span><span class=\"pi\">:<\/span>\n    <span class=\"na\">nginx.ingress.kubernetes.io\/rewrite-target<\/span><span class=\"pi\">:<\/span> <span class=\"s\">\/<\/span>\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\n  <span class=\"na\">ingressClassName<\/span><span class=\"pi\">:<\/span> <span class=\"s\">nginx<\/span>   <span class=\"c1\"># used for ingress controller<\/span>\n  <span class=\"na\">rules<\/span><span class=\"pi\">:<\/span>\n  <span class=\"pi\">-<\/span> <span class=\"na\">host<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">foo.bar.com\"<\/span>\n    <span class=\"na\">http<\/span><span class=\"pi\">:<\/span>\n      <span class=\"na\">paths<\/span><span class=\"pi\">:<\/span>\n      <span class=\"pi\">-<\/span> <span class=\"na\">pathType<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Prefix<\/span>\n        <span class=\"na\">path<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">\/bar\"<\/span>        <span class=\"c1\"># http:\/\/domain\/path<\/span>\n        <span class=\"na\">backend<\/span><span class=\"pi\">:<\/span>\n          <span class=\"na\">service<\/span><span class=\"pi\">:<\/span>\n            <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">service1<\/span>  <span class=\"c1\"># svc<\/span>\n            <span class=\"na\">port<\/span><span class=\"pi\">:<\/span>\n              <span class=\"na\">number<\/span><span class=\"pi\">:<\/span> <span class=\"m\">80<\/span>    <span class=\"c1\"># svc port<\/span>\n  <span class=\"pi\">-<\/span> <span class=\"na\">host<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">*.foo.com\"<\/span>\n    <span class=\"na\">http<\/span><span class=\"pi\">:<\/span>\n      <span class=\"na\">paths<\/span><span class=\"pi\">:<\/span>\n      <span class=\"pi\">-<\/span> <span class=\"na\">pathType<\/span><span class=\"pi\">:<\/span> <span class=\"s\">Prefix<\/span>\n        <span class=\"na\">path<\/span><span class=\"pi\">:<\/span> <span class=\"s2\">\"<\/span><span class=\"s\">\/foo\"<\/span>\n        <span class=\"na\">backend<\/span><span class=\"pi\">:<\/span>\n          <span class=\"na\">service<\/span><span class=\"pi\">:<\/span>\n            <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">service2<\/span>\n            <span class=\"na\">port<\/span><span class=\"pi\">:<\/span>\n              <span class=\"na\">number<\/span><span class=\"pi\">:<\/span> <span class=\"m\">80<\/span>\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"%D8%AA%D8%A3%DB%8C%DB%8C%D8%AF\"><\/span>\n<p>  \u062a\u0623\u06cc\u06cc\u062f<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<h4><span class=\"ez-toc-section\" id=\"1_%DA%A9%D9%86%D8%AA%D8%B1%D9%84_%DA%A9%D9%86%D9%86%D8%AF%D9%87_%D9%88%D8%B1%D9%88%D8%AF%DB%8C_%D9%86%D8%B5%D8%A8_%D8%B4%D8%AF%D9%87_%D8%B1%D8%A7_%D8%A8%D8%B1%D8%B1%D8%B3%DB%8C_%DA%A9%D9%86%DB%8C%D8%AF\"><\/span>\n<p>  1. \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0648\u0631\u0648\u062f\u06cc \u0646\u0635\u0628 \u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight shell\"><code>k get ingressclass\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>\u0627\u06af\u0631 \u0646\u0647\u060c \u0622\u0646 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f<\/p>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight shell\"><code>helm repo add ingress-nginx https:\/\/kubernetes.github.io\/ingress-nginx\nhelm repo update\nhelm <span class=\"nb\">install <\/span>my-nginx-ingress ingress-nginx\/ingress-nginx <span class=\"nt\">-n<\/span> ingress-nginx <span class=\"nt\">--create-namespace<\/span>\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<h4><span class=\"ez-toc-section\" id=\"2_IP%D8%8C_%D8%AF%D8%A7%D9%85%D9%86%D9%87%D8%8C_%D9%BE%D9%88%D8%B1%D8%AA_%D8%B1%D8%A7_%D8%A8%D8%B1%D8%B1%D8%B3%DB%8C_%DA%A9%D9%86%DB%8C%D8%AF\"><\/span>\n<p>  2. IP\u060c \u062f\u0627\u0645\u0646\u0647\u060c \u067e\u0648\u0631\u062a \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight shell\"><code><span class=\"c\"># 1. check port<\/span>\n<span class=\"c\">#    svc asia|europe is bound with pod<\/span>\n<span class=\"c\">#    svc ingress-nginx-controller bound with ingress-controller pod<\/span>\n<span class=\"c\">#        and the target_port:port is 80:30080, so access port is 30080<\/span>\ncontrolplane <span class=\"nv\">$ <\/span>k get svc <span class=\"nt\">-A<\/span>\nNAMESPACE       NAME                                 TYPE        CLUSTER-IP       EXTERNAL-IP   PORT<span class=\"o\">(<\/span>S<span class=\"o\">)<\/span>                      AGE\ndefault         kubernetes                           ClusterIP   10.96.0.1        <none>        443\/TCP                      35h\ningress-nginx   ingress-nginx-controller             NodePort    10.106.174.82    <none>        80:30080\/TCP,443:30443\/TCP   2m12s\ningress-nginx   ingress-nginx-controller-admission   ClusterIP   10.110.84.81     <none>        443\/TCP                      2m13s\nkube-system     kube-dns                             ClusterIP   10.96.0.10       <none>        53\/UDP,53\/TCP,9153\/TCP       35h\nworld           asia                                 ClusterIP   10.100.146.115   <none>        80\/TCP                       44s\nworld           europe                               ClusterIP   10.99.31.152     <none>        80\/TCP                       45s\n<span class=\"c\"># 2. find IP (endpoint -&gt; ingress)<\/span>\ncontrolplane <span class=\"nv\">$ <\/span>k get endpoints\nNAME         ENDPOINTS         AGE\nkubernetes   172.30.1.2:6443   35h\ncontrolplane <span class=\"nv\">$ <\/span>k get ing <span class=\"nt\">-owide<\/span> <span class=\"nt\">-A<\/span>\nNAMESPACE   NAME    CLASS   HOSTS                 ADDRESS      PORTS   AGE\nworld       world   nginx   world.universe.mine   172.30.1.2   80      63s\n<span class=\"c\"># 3. check domain (if not, append it)<\/span>\ncontrolplane <span class=\"nv\">$ <\/span><span class=\"nb\">cat<\/span> \/etc\/hosts\n127.0.0.1 localhost\n\n127.0.0.1 ubuntu\n127.0.0.1 host01\n127.0.0.1 controlplane\n172.30.1.2 world.universe.mine\n<\/none><\/none><\/none><\/none><\/none><\/none><\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<blockquote>\n<p>\u062a\u0648\u062c\u0647: \u0628\u0627 app svc \u0648 ingress svc \u0627\u0634\u062a\u0628\u0627\u0647 \u0646\u06af\u06cc\u0631\u06cc\u062f. \u0628\u0631\u0646\u0627\u0645\u0647 svc \u0628\u0627 \u0627\u067e \u067e\u0627\u062f (\u062f\u0631 \u0627\u06cc\u0646\u062c\u0627\u060c \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644 \u0622\u0633\u06cc\u0627) \u0645\u062a\u0635\u0644 \u0627\u0633\u062a\u060c \u0633\u0627\u06cc\u0631 \u067e\u0627\u062f\u0647\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0622\u0646 \u0628\u0647 \u0622\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f <code>svc_ip:svc_port<\/code>; ingress svc \u0628\u0627 \u063a\u0644\u0627\u0641 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0648\u0631\u0648\u062f\u06cc \u0645\u062a\u0635\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u06cc\u0646\u0647\u0627 \u062f\u0631 \u0647\u0646\u06af\u0627\u0645 \u0646\u0635\u0628 \u0648\u0631\u0648\u062f\u06cc \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u0634\u0648\u0646\u062f <code>ingress-nginx<\/code> \u0641\u0636\u0627\u06cc \u0646\u0627\u0645 \u063a\u0644\u0627\u0641 \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0627\u0631\u062c\u06cc \u0628\u0627\u06cc\u062f \u0627\u0632 \u067e\u0648\u0631\u062a \u0648\u0631\u0648\u062f\u06cc svc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.<\/p>\n<\/blockquote>\n<h4><span class=\"ez-toc-section\" id=\"3_IP%D9%85%D8%B3%DB%8C%D8%B1_%D9%88%D8%B1%D9%88%D8%AF%DB%8C_%D9%BE%DB%8C%DA%86%DB%8C%D8%AF%DA%AF%DB%8C\"><\/span>\n<p>  3. IP\/\u0645\u0633\u06cc\u0631 \u0648\u0631\u0648\u062f\u06cc \u067e\u06cc\u0686\u06cc\u062f\u06af\u06cc<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight shell\"><code><span class=\"c\"># curl domain_name:port\/path<\/span>\ncontrolplane <span class=\"nv\">$ <\/span>curl world.universe.mine:30080\/asia\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"NetworkPolicy\"><\/span>\n<p>  NetworkPolicy<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>\u062a\u0631\u0627\u0641\u06cc\u06a9 \u0647\u0627 \u0631\u0627 \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0646\u06cc\u062f<\/li>\n<li>\u0632\u0645\u06cc\u0646\u0647 \u0647\u0627:\n<ul>\n<li>\u0631\u0648\u06cc \u063a\u0644\u0627\u0641 \u0647\u0627 \u0639\u0645\u0644 \u06a9\u0646\u06cc\u062f:\n<\/li>\n<li>\u0646\u0648\u0639 np:\n<\/li>\n<li>\u0645\u0646\u0628\u0639 \u062c\u0631\u06cc\u0627\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \/ \u063a\u0644\u0627\u0641 \u0645\u0642\u0635\u062f\n<ul>\n<li><code>namespaceSelector<\/code><\/li>\n<li><code>podSelector<\/code><\/li>\n<li>\n<code>ports<\/code>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight yaml\"><code><span class=\"na\">apiVersion<\/span><span class=\"pi\">:<\/span> <span class=\"s\">networking.k8s.io\/v1<\/span>\n<span class=\"na\">kind<\/span><span class=\"pi\">:<\/span> <span class=\"s\">NetworkPolicy<\/span>\n<span class=\"na\">metadata<\/span><span class=\"pi\">:<\/span>\n  <span class=\"na\">name<\/span><span class=\"pi\">:<\/span> <span class=\"s\">test-network-policy<\/span>\n  <span class=\"na\">namespace<\/span><span class=\"pi\">:<\/span> <span class=\"s\">default<\/span>        <span class=\"c1\"># set act on pod ns label<\/span>\n<span class=\"na\">spec<\/span><span class=\"pi\">:<\/span>\n  <span class=\"na\">podSelector<\/span><span class=\"pi\">:<\/span>\n    <span class=\"na\">matchLabels<\/span><span class=\"pi\">:<\/span>\n      <span class=\"na\">role<\/span><span class=\"pi\">:<\/span> <span class=\"s\">db<\/span>              <span class=\"c1\"># set act on pod label<\/span>\n  <span class=\"na\">policyTypes<\/span><span class=\"pi\">:<\/span>\n  <span class=\"pi\">-<\/span> <span class=\"s\">Ingress<\/span>\n  <span class=\"pi\">-<\/span> <span class=\"s\">Egress<\/span>\n  <span class=\"na\">ingress<\/span><span class=\"pi\">:<\/span>\n  <span class=\"pi\">-<\/span> <span class=\"na\">from<\/span><span class=\"pi\">:<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"na\">ipBlock<\/span><span class=\"pi\">:<\/span>\n        <span class=\"na\">cidr<\/span><span class=\"pi\">:<\/span> <span class=\"s\">172.17.0.0\/16<\/span>\n        <span class=\"na\">except<\/span><span class=\"pi\">:<\/span>\n        <span class=\"pi\">-<\/span> <span class=\"s\">172.17.1.0\/24<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"na\">namespaceSelector<\/span><span class=\"pi\">:<\/span>\n        <span class=\"na\">matchLabels<\/span><span class=\"pi\">:<\/span>\n          <span class=\"na\">project<\/span><span class=\"pi\">:<\/span> <span class=\"s\">myproj<\/span>   <span class=\"c1\"># set src\/dst pods ns label<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"na\">podSelector<\/span><span class=\"pi\">:<\/span>\n        <span class=\"na\">matchLabels<\/span><span class=\"pi\">:<\/span>\n          <span class=\"na\">role<\/span><span class=\"pi\">:<\/span> <span class=\"s\">frontend<\/span>    <span class=\"c1\"># set src\/dst pods label<\/span>\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"na\">protocol<\/span><span class=\"pi\">:<\/span> <span class=\"s\">TCP<\/span>\n      <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">6379<\/span>\n  <span class=\"na\">egress<\/span><span class=\"pi\">:<\/span>\n  <span class=\"pi\">-<\/span> <span class=\"na\">to<\/span><span class=\"pi\">:<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"na\">ipBlock<\/span><span class=\"pi\">:<\/span>\n        <span class=\"na\">cidr<\/span><span class=\"pi\">:<\/span> <span class=\"s\">10.0.0.0\/24<\/span>\n    <span class=\"na\">ports<\/span><span class=\"pi\">:<\/span>\n    <span class=\"pi\">-<\/span> <span class=\"na\">protocol<\/span><span class=\"pi\">:<\/span> <span class=\"s\">TCP<\/span>\n      <span class=\"na\">port<\/span><span class=\"pi\">:<\/span> <span class=\"m\">5978<\/span>            <span class=\"c1\"># set filter port<\/span>\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>\u0648 \u0628\u0631\u0686\u0633\u0628 \u0647\u0627 \u0631\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f<\/p>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight shell\"><code>k get ns <span class=\"nt\">--show-labels<\/span>\nk get pod <span class=\"nt\">-A<\/span> <span class=\"nt\">--show-labels<\/span>\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"%D8%AA%D8%A3%DB%8C%DB%8C%D8%AF-2\"><\/span>\n<p>  \u062a\u0623\u06cc\u06cc\u062f<br \/>\n<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0642\u0648\u0627\u0646\u06cc\u0646 \u0641\u06cc\u0644\u062a\u0631\u060c \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9\u060c \u067e\u0627\u062f \u0645\u0646\u0628\u0639 \u0648 \u067e\u0627\u062f \u0645\u0642\u0635\u062f \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f<\/p>\n<div class=\"highlight js-code-highlight\">\n<pre class=\"highlight shell\"><code>k <span class=\"nb\">exec<\/span> <span class=\"nt\">-it<\/span> pod01 <span class=\"nt\">--<\/span> curl svc02.ns02.svc.cluster.local\nk <span class=\"nb\">exec<\/span> <span class=\"nt\">-it<\/span> test_pod <span class=\"nt\">--<\/span> curl svc02.ns02.svc.cluster.local\n<\/code><\/pre>\n<div class=\"highlight__panel js-actions-panel\">\n<div class=\"highlight__panel-action js-fullscreen-code-action\">\n    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-on\"><title>\u0648\u0627\u0631\u062f \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M16 3h6v6h-2V5h-4V3zM2 3h6v2H4v4H2V3zm18 16v-4h2v6h-6v-2h4zM4 19h4v2H2v-6h2v4z\"\/>\n<\/svg><\/p>\n<p>    <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" class=\"highlight-action crayons-icon highlight-action--fullscreen-off\"><title>\u0627\u0632 \u062d\u0627\u0644\u062a \u062a\u0645\u0627\u0645 \u0635\u0641\u062d\u0647 \u062e\u0627\u0631\u062c \u0634\u0648\u06cc\u062f<\/title>\n    <path d=\"M18 7h4v2h-6V3h2v4zM8 9H2V7h4V3h2v6zm10 8v4h-2v-6h6v2h-4zM8 15v6H6v-4H2v-2h6z\"\/>\n<\/svg><\/p>\n<\/div>\n<\/div>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u0648\u0631\u0648\u062f \u0648\u0631\u0648\u062f \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0627\u0631\u062c\u06cc: domain_name:port\/path \u0632\u0645\u06cc\u0646\u0647: rules.ingressClassName path -> \u0645\u0633\u06cc\u0631 backend.service.name -> \u062e\u062f\u0645\u0627\u062a port -> \u067e\u0648\u0631\u062a \u0633\u0631\u0648\u06cc\u0633 host -> \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647 apiVersion: networking.k8s.io\/v1 kind: Ingress metadata: name: ingress-wildcard-host annotations: nginx.ingress.kubernetes.io\/rewrite-target: \/ spec: ingressClassName: nginx # used for ingress controller rules: &#8211; host: &#8220;foo.bar.com&#8221; http: paths: &#8211; pathType: Prefix path: &#8220;\/bar&#8221; # http:\/\/domain\/path backend: service: &hellip;<\/p>\n","protected":false},"author":2,"featured_media":91174,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[339],"tags":[],"class_list":["post-91173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dev"],"_links":{"self":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/posts\/91173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/comments?post=91173"}],"version-history":[{"count":0,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/posts\/91173\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/media\/91174"}],"wp:attachment":[{"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/media?parent=91173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/categories?post=91173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nabfollower.com\/blog\/wp-json\/wp\/v2\/tags?post=91173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}