K8s 环境下使用 HostNetwork 模式部署 Envoy Gateway

1
root@k8s-master:~/gateway/deploy# ls
2
app-httproute-nginx.yaml  gatewayclass.yaml  infra-envoyproxy.yaml  infra-gateway.yaml
3
root@k8s-master:~/gateway/deploy# cat gatewayclass.yaml
4
apiVersion: gateway.networking.k8s.io/v1
5
kind: GatewayClass
6
metadata:
7
  name: shared-gw-class
8
spec:
9
  controllerName: gateway.envoyproxy.io/gatewayclass-controller
10
root@k8s-master:~/gateway/deploy# cat infra-envoyproxy.yaml
11
apiVersion: gateway.envoyproxy.io/v1alpha1
12
kind: EnvoyProxy
13
metadata:
14
  name: shared-gw-proxy
15
  namespace: infra-gw
16
spec:
17
  provider:
18
    type: Kubernetes
19
    kubernetes:
20
      useListenerPortAsContainerPort: true
21
      envoyService:
22
        type: ClusterIP
23
      envoyDaemonSet:
24
        patch:
25
          value:
26
            spec:
27
              template:
28
                spec:
29
                  hostNetwork: true
30
                  dnsPolicy: ClusterFirstWithHostNet
31
                  # 添加这个容忍配置
32
                  tolerations:
33
                    - key: node-role.kubernetes.io/control-plane
34
                      operator: Exists
35
                      effect: NoSchedule
36
        container:
37
          securityContext:
38
            runAsUser: 0
39
            allowPrivilegeEscalation: true
40
          #image: envoyproxy/envoy:distroless-v1.36.2
41
root@k8s-master:~/gateway/deploy# cat infra-gateway.yaml
42
apiVersion: gateway.networking.k8s.io/v1
43
kind: Gateway
44
metadata:
45
  name: shared-gateway
46
  namespace: infra-gw
47
spec:
48
  gatewayClassName: shared-gw-class
49
  infrastructure:
50
    parametersRef:
51
      group: gateway.envoyproxy.io
52
      kind: EnvoyProxy
53
      name: shared-gw-proxy
54
  listeners:
55
    - name: http
56
      protocol: HTTP
57
      port: 80
58
      allowedRoutes:
59
        namespaces:
60
          from: All   # 允许所有 namespace 的 Route 绑定到这个 Gateway
61
root@k8s-master:~/gateway/deploy# cat app-httproute-nginx.yaml
62
apiVersion: gateway.networking.k8s.io/v1
63
kind: HTTPRoute
64
metadata:
65
  name: nginx
66
  namespace: nginx-deploy-ns
67
spec:
68
  parentRefs:
69
    - name: shared-gateway
70
      namespace: infra-gw   # 指向基础设施 ns 的共享 Gateway
71
  rules:
72
    - matches:
73
        - path:
74
            type: PathPrefix
75
            value: /
76
      backendRefs:
77
        - name: nginx-service       # app-namespace 里的 nginx Service
78
          port: 80