k8s通过nginx-ingress部署fpm+nginx

秒速五厘米 2022-11-30 12:28 290阅读 0赞

### k8s通过nginx-ingress部署fpm+nginx ###

*  准备基于docker的php-fpm、nginx镜像
 *   *  准备基础php-fpm镜像
     *  准备nginx镜像
 *  k8s部署准备
 *   *  准备\`\`yaml\`\`编排文件
     *   *   *  1、准备\`\`nginx\`\`的配置映射卷
         *  2、准备工作负载的\`\`deploymet.yaml\`\`
         *  3、
         *  部署

# 准备基于docker的php-fpm、nginx镜像 #

## 准备基础php-fpm镜像 ##

1、准备基础php-fpm镜像，准备`Dockerfile`，打包镜像`docker build --rm -t private-php-fpm:develop .`

FROM php:7.3-fpm-alpine3.12
    
    MAINTAINER wly <1228022817@qq.com>
    
    RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories \
        && apk update \
        && apk add --no-cache \
               bzip2 zlib libzip libxml2 gmp libpng \
        && apk add --no-cache --virtual .build-deps $PHPIZE_DEPS \
               bzip2-dev zlib-dev libzip-dev libxml2-dev gmp-dev libpng-dev \
        && apk add -U tzdata \
        && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
        && apk del tzdata
    
    RUN docker-php-ext-install calendar bz2 zip soap iconv exif gmp bcmath sockets mysqli pdo_mysql opcache \
        && docker-php-ext-enable calendar bz2 zip soap iconv exif gmp bcmath sockets mysqli pdo_mysql opcache \
        && docker-php-ext-install -j$(nproc) gd
    #pecl安装扩展
    RUN pecl install redis protobuf \
        && docker-php-ext-enable redis protobuf
    # 使用默认的生产环境配置文件（官方推荐）
    RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
    #下载源码方式安装扩展
    RUN cd /tmp \
        && wget https://pecl.php.net/get/msgpack-2.1.1.tgz \
        && tar zxvf msgpack-2.1.1.tgz \
        && mv msgpack-2.1.1 msgpack \
        && docker-php-ext-install /tmp/msgpack \
        && docker-php-ext-enable  msgpack \
        && rm -rf msgpack-2.1.1.tgz msgpack
        #拷贝代码,我这边php代码在Dockerfile同级的code文件夹中
    COPY code/ /var/www/html/
    #文件权限设置，根据实际情况授予对应权限
    RUN chmod 755 /var/www/html/*

## 准备nginx镜像 ##

2、准备nginx镜像（如果code文件夹中包含静态h5或者其他资源需要通过nginx访问的，请执行该步骤）生成`Dockerfile-nginx`，构建镜像`docker build --rm -f Dockerfile-nginx -t private-nginx:develop .`

FROM nginx:alpine
    
    MAINTAINER wly <1228022817@qq.com>
    #拷贝代码，并修改时区和alpine镜像源
    COPY open.iuiweb.com/ /var/www/html/
    RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories \
        && apk update \
        && apk add -U tzdata \
        && cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime \
        && apk del tzdata \
        && chmod 755 /var/www/html/*

# k8s部署准备 #

## 准备`yaml`编排文件 ##

#### 1、准备`nginx`的配置映射卷 ####

kind: ConfigMap
    apiVersion: v1
    metadata:
      name: nginx-config
      namespace: default
    data:
      nginx.conf: |
      events {
            worker_connections  1024;
        }
    
    
        http {
        
            include       /etc/nginx/mime.types;
            default_type  application/octet-stream;
    
            log_format  main  '$remote_addr - $remote_user [$time_local] "$http_host" "$request" '
                              '$status $body_bytes_sent "$http_referer" '
                              '"$http_user_agent" "$http_x_forwarded_for" '
                              '"$upstream_status" "$upstream_response_time" "$request_time"';
    
            access_log  /var/log/nginx/access.log  main;
    
            sendfile        on;
            #tcp_nopush     on;
    
            keepalive_timeout  0;
    
            #gzip  on;
    
            #include /etc/nginx/conf.d/*.conf;
        server {
        
                listen 80 default_server;
                server_name _;
                #add_header Connection "close";
                location / {
        
                  root /var/www/html;
                  index index.php;
                  try_files $uri $uri/ /index.html;
                }
                location ~ \.php$ {
        
                  include /etc/nginx/fastcgi.conf;
                  fastcgi_param REQUEST_METHOD $request_method;
                  fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                  fastcgi_pass 127.0.0.1:9000;
                  #proxy_set_header Connection "close";
                }
              }
        }

### 2、准备工作负载的`deploymet.yaml` ###

apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: php-fpm-nginx-cluster
      namespace: default
    spec:
      replicas: 1
      selector:
        matchLabels:
          app: php-fpm-nginx-cluster
      template:
        metadata:
          labels:
            app: php-fpm-nginx-cluster
        spec:
          containers:
          - image: private-php-fpm:develop
            imagePullPolicy: Always
            name: private-php-fpm
            ports:
            - containerPort: 9000
              name: fpm-tcp
              protocol: TCP
          - image: private-nginx:develop
            imagePullPolicy: Always
            name: nginx
            ports:
            - containerPort: 80
              name: http
              protocol: TCP
            volumeMounts:
            - mountPath: /etc/nginx/nginx.conf
              name: vol1-nginx-confi
              readOnly: true
              subPath: nginx.conf
          initContainers:
          - image: busybox
            command:
            - sh
            - -c
            - echo 10000 > /proc/sys/net/core/somaxconn && echo 1 > /proc/sys/net/ipv4/tcp_tw_reuse
              && echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout && echo 5 > /proc/sys/net/ipv4/tcp_syn_retries
              && echo 1200 > /proc/sys/net/ipv4/tcp_keepalive_time && echo 1024 65000
              > /proc/sys/net/ipv4/ip_local_port_range && echo 8192 > proc/sys/net/ipv4/tcp_max_syn_backlog
              && echo 5000 > /proc/sys/net/ipv4/tcp_max_tw_buckets
            imagePullPolicy: Always
            name: setsysctl
            securityContext:
              privileged: true
          restartPolicy: Always
          volumes:
          - configMap:
              defaultMode: 256
              items:
              - key: nginx.conf
                path: nginx.conf
              name: nginx-config
              optional: false
            name: vol1-nginx-config

### 3、 ###

### 部署 ###

通过`dashnoard`或者`rancher`面板，亦或者通过k8s命令

kubectl apply -f xxxx.yaml -n namespace

修改ingress-nginx的名称为 `nginx-configuration`的配置映射，添加键值对：键（key）：keep-alive 值（value）：0