• 解决方法比较多主要根据自己的环境找到合适的解决方式，ingress-nginx默认监听443,80，这里的环境主要是因为路由器映射到非80端口导致跳转的Heather的Request丢失端口跳转到了默认的80
  参考
  http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_redirect
  https://www.nginx.com/resources/wiki/start/topics/examples/fullexample2/
  https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/#proxy-redirect

  nginx配置

  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

  http { upstream tomcat { server 127.0.0.1:9090 weight=1 max_fails=3 fail_timeout=30s; } server { listen 80; server_name example.com *.example.com; location / { proxy_next_upstream http_502 http_504 error timeout invalid_header; proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_redirect http://$host http://$host:$server_port;//由于是路由器上面配置映射非80端口到80端口这里就不能使用$server_port需要直接写端口号 proxy_redirect off; } } }

ingress-nginx配置

默认ingress-nginx 代理重定向是OFF

1
2

[root@centos-master ~]# kubectl exec -it nginx-ingress-controller-1971110253-0rcjw  -n kube-system -- cat /etc/nginx/nginx.conf   | grep "proxy_redirect" | head -n 1
            proxy_redirect                          off;

ingress代理重定向配置

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

kind: Ingress
apiVersion: extensions/v1beta1
metadata:
  name: ${projectSvc}
  annotations:
    nginx.ingress.kubernetes.io/proxy-redirect-from: "test.cn:9090"
    nginx.ingress.kubernetes.io/proxy-redirect-to: "test.cn:9090"
spec:
  rules:
  - host:  ${projectUrl}
    http:
      paths:
      - path: /
        backend:
          serviceName: ${projectSvc}
          servicePort: 80
  - host: ${projectUrl/test.loca/test.cn}
    http: 
      paths: 
      - path: /
        backend:
          serviceName: ${projectSvc}
          servicePort: 80

• 重点

1
2

nginx.ingress.kubernetes.io/proxy-redirect-from: "idcsec.com"
nginx.ingress.kubernetes.io/proxy-redirect-to: "idcsec.com"