TLS-listener Gateway со ссылкой на сертификат gateway-api
Терминация TLS на шлюзе через certificateRefs к Secret
kubectl apply -f - <<'EOF'
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata: {name: gw, namespace: <ns>}
spec:
gatewayClassName: <name>
listeners:
- name: https
protocol: HTTPS
port: 443
tls:
mode: Terminate
certificateRefs: [{name: tls-cert}]
EOF
more gateway-api
all 5 commands →
Проверка условия Accepted у HTTPRoute
kubectl describe httproute <name> -n <ns> | grep -A8 Conditions
Инвентаризация ресурсов Gateway API
kubectl get gatewayclass,gateway,httproute -A
HTTPRoute с весами для канарейки
kubectl apply -f - <<'EOF'
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata: {name: web, namespace: <ns>}
spec:
parentRefs: [{name: gw}]
rules:
- backendRefs:
- {name: web-stable, port: 80, weight: 90}
- {name: web-canary, port: 80, weight: 10}
EOF
Разрешение кросс-неймспейс маршрута через ReferenceGrant
kubectl apply -f - <<'EOF'
apiVersion: gateway.networking.k8s.io/v1beta1
kind: ReferenceGrant
metadata: {name: allow-routes, namespace: backend}
spec:
from: [{group: gateway.networking.k8s.io, kind: HTTPRoute, namespace: edge}]
to: [{group: "", kind: Service}]
EOF