https://ops.docs.72602.space/tags/ingress/index.html Hugo en Fri, 07 Jun 2024 15:00:59 +0800 https://ops.docs.72602.space/csp/72602/index.html Thu, 07 Mar 2024 15:00:59 +0800 https://ops.docs.72602.space/csp/72602/index.html Scope This section is the single source of truth for 72602 cluster operations. Topology Public ECS: 47.110.67.161 (2C4G, cn-hangzhou, zone cn-hangzhou-i) Active ingress domain: 72602.space; legacy .72602.online routes are retired ArgoCD host: argocd.72602.space k3s node: 72602-minipc (192.168.0.25, MiniPC N100 28G+1TB NVMe) SSH reverse tunnel: :10021 (main), :10022 (backup and Mailu loopback) Web tunnel: WireGuard UDP 51820 between ECS and minipc Ingress NodePort: 32080 (HTTP), 32443 (HTTPS) Ingress class: nginx Ingress namespace: basic-components cert-manager issuer: lets-encrypt Storage class: local-path (default, RWO) OS: Ubuntu 26.04 LTS (minipc) k3s version: v1.34.6+k3s1 (installed via install.sh) Traffic Path Web: https://ops.docs.72602.space/csp/72602/tunnel/wireguard-web/index.html Mon, 01 Jan 0001 00:00:00 +0000 https://ops.docs.72602.space/csp/72602/tunnel/wireguard-web/index.html WireGuard Web Tunnel 公网 Web 入口固定由 ECS HAProxy 持有，HAProxy 通过 WireGuard 访问 72602-minipc 的 ingress-nginx NodePort。TLS 仍由 ingress-nginx 和 cert-manager 管理；ECS 不复制证书，不启用 PROXY protocol，也不终止 TLS。 Internet TCP 80/443 -> ECS HAProxy -> primary: WireGuard 10.77.0.1 <-> 10.77.0.2 over UDP 51820 -> minipc TCP 32080/32443 -> ingress-nginx -> backup: ECS-loopback SSH Web path 127.0.0.1:18080/18443 -> minipc TCP 32080/32443 -> ingress-nginx The WireGuard and SSH Web paths are alternative HAProxy backends, not a serial chain. The SSH Web fallback is an independent ECS-loopback service; its host-local unit and credentials are kept in private host state/ ops-private, not reproduced in this repository. https://ops.docs.72602.space/installation/networking/ingress/index.html Fri, 07 Jun 2024 15:00:59 +0800 https://ops.docs.72602.space/installation/networking/ingress/index.html Installation Install By Helm ArgoCD Preliminary 1. Kubernetes is installed; if not, check 🔗link 2. Helm is installed; if not, check 🔗link 1.get helm repo Details helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx helm repo update 2.install chart Details helm install ingress-nginx/ingress-nginx --generate-name Using Mirror helm repo add ay-helm-mirror https://aaronyang0628.github.io/helm-chart-mirror/charts && helm install ay-helm-mirror/ingress-nginx --generate-name --version 4.15.1 for more information, you can check 🔗https://aaronyang0628.github.io/helm-chart-mirror/