service-ingress

Name: service-ingress
Author: chaterm

42installs12forks

How to install service-ingress?

chaterm/terminal-skills/service-ingress

$npx -y skills add chaterm/terminal-skills --skill service-ingress

Installs into the current project.

Summary

Kubernetes Service 与 Ingress

Files · 1

View on GitHub

SKILL.md

1	# Service 与 Ingress
2
3	## 概述
4	服务暴露、Ingress 配置、TLS 终止等技能。
5
6	## Service 类型
7
8	### ClusterIP（默认）
9	```yaml
10	apiVersion: v1
11	kind: Service
12	metadata:
13	name: my-service
14	spec:
15	type: ClusterIP
16	selector:
17	app: nginx
18	ports:
19	- port: 80
20	targetPort: 8080
21	```
22
23	### NodePort
24	```yaml
25	apiVersion: v1
26	kind: Service
27	metadata:
28	name: my-service
29	spec:
30	type: NodePort
31	selector:
32	app: nginx
33	ports:
34	- port: 80
35	targetPort: 8080
36	nodePort: 30080 # 30000-32767
37	```
38
39	### LoadBalancer
40	```yaml
41	apiVersion: v1
42	kind: Service
43	metadata:
44	name: my-service
45	spec:
46	type: LoadBalancer
47	selector:
48	app: nginx
49	ports:
50	- port: 80
51	targetPort: 8080
52	```
53
54	### ExternalName
55	```yaml
56	apiVersion: v1
57	kind: Service
58	metadata:
59	name: external-db
60	spec:
61	type: ExternalName
62	externalName: db.example.com
63	```
64
65	### Headless Service
66	```yaml
67	apiVersion: v1
68	kind: Service
69	metadata:
70	name: headless-service
71	spec:
72	clusterIP: None
73	selector:
74	app: nginx
75	ports:
76	- port: 80
77	```
78
79	## Service 操作
80
81	```bash
82	# 查看 Service
83	kubectl get svc
84	kubectl get svc -o wide
85	kubectl describe svc service-name
86
87	# 创建 Service
88	kubectl expose deploy deployment-name --port=80 --target-port=8080
89	kubectl expose deploy deployment-name --type=NodePort --port=80
90
91	# 删除 Service
92	kubectl delete svc service-name
93
94	# 测试 Service
95	kubectl run test --rm -it --image=busybox -- wget -qO- http://service-name
96	```
97
98	## Ingress 配置
99
100	### 基础 Ingress
101	```yaml
102	apiVersion: networking.k8s.io/v1
103	kind: Ingress
104	metadata:
105	name: my-ingress
106	annotations:
107	nginx.ingress.kubernetes.io/rewrite-target: /
108	spec:
109	ingressClassName: nginx
110	rules:
111	- host: example.com
112	http:
113	paths:
114	- path: /
115	pathType: Prefix
116	backend:
117	service:
118	name: my-service
119	port:
120	number: 80
121	```
122
123	### 多路径 Ingress
124	```yaml
125	apiVersion: networking.k8s.io/v1
126	kind: Ingress
127	metadata:
128	name: multi-path-ingress
129	spec:
130	ingressClassName: nginx
131	rules:
132	- host: example.com
133	http:
134	paths:
135	- path: /api
136	pathType: Prefix
137	backend:
138	service:
139	name: api-service
140	port:
141	number: 80
142	- path: /web
143	pathType: Prefix
144	backend:
145	service:
146	name: web-service
147	port:
148	number: 80
149	```
150
151	### 多域名 Ingress
152	```yaml
153	apiVersion: networking.k8s.io/v1
154	kind: Ingress
155	metadata:
156	name: multi-host-ingress
157	spec:
158	ingressClassName: nginx
159	rules:
160	- host: api.example.com
161	http:
162	paths:
163	- path: /
164	pathType: Prefix
165	backend:
166	service:
167	name: api-service
168	port:
169	number: 80
170	- host: web.example.com
171	http:
172	paths:
173	- path: /
174	pathType: Prefix
175	backend:
176	service:
177	name: web-service
178	port:
179	number: 80
180	```
181
182	## TLS 配置
183
184	### 创建 TLS Secret
185	```bash
186	# 从证书文件创建
187	kubectl create secret tls tls-secret --cert=cert.pem --key=key.pem
188
189	# 查看 Secret
190	kubectl get secret tls-secret -o yaml
191	```
192
193	### Ingress TLS
194	```yaml
195	apiVersion: networking.k8s.io/v1
196	kind: Ingress
197	metadata:
198	name: tls-ingress
199	annotations:
200	nginx.ingress.kubernetes.io/ssl-redirect: "true"
201	spec:
202	ingressClassName: nginx
203	tls:
204	- hosts:
205	- example.com
206	secretName: tls-secret
207	rules:
208	- host: example.com
209	http:
210	paths:
211	- path: /
212	pathType: Prefix
213	backend:
214	service:
215	name: my-service
216	port:
217	number: 80
218	```
219
220	### cert-manager 自动证书
221	```yaml
222	apiVersion: networking.k8s.io/v1
223	kind: Ingress
224	metadata:
225	name: auto-tls-ingress
226	annotations:
227	cert-manager.io/cluster-issuer: letsencrypt-prod
228	spec:
229	ingressClassName: nginx
230	tls:
231	- hosts:
232	- example.com
233	secretName: example-tls
234	rules:
235	- host: example.com
236	http:
237	paths:
238	- path: /
239	pathType: Prefix
240	backend:
241	service:
242	name: my-service
243	port:
244	number: 80
245	```
246
247	## Ingress 注解
248
249	### Nginx Ingress 常用注解
250	```yaml
251	metadata:
252	annotations:
253	# 重写路径
254	nginx.ingress.kubernetes.io/rewrite-target: /$2
255
256	# SSL 重定向
257	nginx.ingress.kubernetes.io/ssl-redirect: "true"
258
259	# 代理超时
260	nginx.ingress.kubernetes.io/proxy-connect-timeout: "30"
261	nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
262	nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
263
264	# 请求体大小
265	nginx.ingress.kubernetes.io/proxy-body-size: "50m"
266
267	# 限流
268	nginx.ingress.kubernetes.io/limit-rps: "10"
269
270	# WebSocket
271	nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
272	nginx.ingress.kubernetes.io/upstream-hash-by: "$request_uri"
273
274	# 跨域
275	nginx.ingress.kubernetes.io/enable-cors: "true"
276	nginx.ingress.kubernetes.io/cors-allow-origin: "*"
277	```
278
279	## Ingress 操作
280
281	```bash
282	# 查看 Ingress
283	kubectl get ingress
284	kubectl

People who liked this also viewed

6 picks

Type

microsoft-foundryDeploy, evaluate, fine-tune, and manage Foundry agents end-to-end with azd: hosted agent scaffold/run/deploy, prompt agent create, batch eval, continuous eval, prompt optimizer, Agent Optimizer scaffoSkillsJul 2026476k1.3k
azure-deployExecute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application SkillsJul 2026472k1.3k
azure-preparePrepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wSkillsJul 2026471k1.3k
azure-validate--- name: azure-validate description: "Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity pSkillsJul 2026471k1.3k
azure-aigatewayConfigure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbSkillsJul 2026470k1.3k
azure-hosted-copilot-sdkOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026424k1.3k

service-ingress

42installs12forks

View on GitHub

How to install service-ingress?

chaterm/terminal-skills/service-ingress

$npx -y skills add chaterm/terminal-skills --skill service-ingress

Installs into the current project.

Summary

Kubernetes Service 与 Ingress

Files · 1

View on GitHub

SKILL.md

1	# Service 与 Ingress
2
3	## 概述
4	服务暴露、Ingress 配置、TLS 终止等技能。
5
6	## Service 类型
7
8	### ClusterIP（默认）
9	```yaml
10	apiVersion: v1
11	kind: Service
12	metadata:
13	name: my-service
14	spec:
15	type: ClusterIP
16	selector:
17	app: nginx
18	ports:
19	- port: 80
20	targetPort: 8080
21	```
22
23	### NodePort
24	```yaml
25	apiVersion: v1
26	kind: Service
27	metadata:
28	name: my-service
29	spec:
30	type: NodePort
31	selector:
32	app: nginx
33	ports:
34	- port: 80
35	targetPort: 8080
36	nodePort: 30080 # 30000-32767
37	```
38
39	### LoadBalancer
40	```yaml
41	apiVersion: v1
42	kind: Service
43	metadata:
44	name: my-service
45	spec:
46	type: LoadBalancer
47	selector:
48	app: nginx
49	ports:
50	- port: 80
51	targetPort: 8080
52	```
53
54	### ExternalName
55	```yaml
56	apiVersion: v1
57	kind: Service
58	metadata:
59	name: external-db
60	spec:
61	type: ExternalName
62	externalName: db.example.com
63	```
64
65	### Headless Service
66	```yaml
67	apiVersion: v1
68	kind: Service
69	metadata:
70	name: headless-service
71	spec:
72	clusterIP: None
73	selector:
74	app: nginx
75	ports:
76	- port: 80
77	```
78
79	## Service 操作
80
81	```bash
82	# 查看 Service
83	kubectl get svc
84	kubectl get svc -o wide
85	kubectl describe svc service-name
86
87	# 创建 Service
88	kubectl expose deploy deployment-name --port=80 --target-port=8080
89	kubectl expose deploy deployment-name --type=NodePort --port=80
90
91	# 删除 Service
92	kubectl delete svc service-name
93
94	# 测试 Service
95	kubectl run test --rm -it --image=busybox -- wget -qO- http://service-name
96	```
97
98	## Ingress 配置
99
100	### 基础 Ingress
101	```yaml
102	apiVersion: networking.k8s.io/v1
103	kind: Ingress
104	metadata:
105	name: my-ingress
106	annotations:
107	nginx.ingress.kubernetes.io/rewrite-target: /
108	spec:
109	ingressClassName: nginx
110	rules:
111	- host: example.com
112	http:
113	paths:
114	- path: /
115	pathType: Prefix
116	backend:
117	service:
118	name: my-service
119	port:
120	number: 80
121	```
122
123	### 多路径 Ingress
124	```yaml
125	apiVersion: networking.k8s.io/v1
126	kind: Ingress
127	metadata:
128	name: multi-path-ingress
129	spec:
130	ingressClassName: nginx
131	rules:
132	- host: example.com
133	http:
134	paths:
135	- path: /api
136	pathType: Prefix
137	backend:
138	service:
139	name: api-service
140	port:
141	number: 80
142	- path: /web
143	pathType: Prefix
144	backend:
145	service:
146	name: web-service
147	port:
148	number: 80
149	```
150
151	### 多域名 Ingress
152	```yaml
153	apiVersion: networking.k8s.io/v1
154	kind: Ingress
155	metadata:
156	name: multi-host-ingress
157	spec:
158	ingressClassName: nginx
159	rules:
160	- host: api.example.com
161	http:
162	paths:
163	- path: /
164	pathType: Prefix
165	backend:
166	service:
167	name: api-service
168	port:
169	number: 80
170	- host: web.example.com
171	http:
172	paths:
173	- path: /
174	pathType: Prefix
175	backend:
176	service:
177	name: web-service
178	port:
179	number: 80
180	```
181
182	## TLS 配置
183
184	### 创建 TLS Secret
185	```bash
186	# 从证书文件创建
187	kubectl create secret tls tls-secret --cert=cert.pem --key=key.pem
188
189	# 查看 Secret
190	kubectl get secret tls-secret -o yaml
191	```
192
193	### Ingress TLS
194	```yaml
195	apiVersion: networking.k8s.io/v1
196	kind: Ingress
197	metadata:
198	name: tls-ingress
199	annotations:
200	nginx.ingress.kubernetes.io/ssl-redirect: "true"
201	spec:
202	ingressClassName: nginx
203	tls:
204	- hosts:
205	- example.com
206	secretName: tls-secret
207	rules:
208	- host: example.com
209	http:
210	paths:
211	- path: /
212	pathType: Prefix
213	backend:
214	service:
215	name: my-service
216	port:
217	number: 80
218	```
219
220	### cert-manager 自动证书
221	```yaml
222	apiVersion: networking.k8s.io/v1
223	kind: Ingress
224	metadata:
225	name: auto-tls-ingress
226	annotations:
227	cert-manager.io/cluster-issuer: letsencrypt-prod
228	spec:
229	ingressClassName: nginx
230	tls:
231	- hosts:
232	- example.com
233	secretName: example-tls
234	rules:
235	- host: example.com
236	http:
237	paths:
238	- path: /
239	pathType: Prefix
240	backend:
241	service:
242	name: my-service
243	port:
244	number: 80
245	```
246
247	## Ingress 注解
248
249	### Nginx Ingress 常用注解
250	```yaml
251	metadata:
252	annotations:
253	# 重写路径
254	nginx.ingress.kubernetes.io/rewrite-target: /$2
255
256	# SSL 重定向
257	nginx.ingress.kubernetes.io/ssl-redirect: "true"
258
259	# 代理超时
260	nginx.ingress.kubernetes.io/proxy-connect-timeout: "30"
261	nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
262	nginx.ingress.kubernetes.io/proxy-send-timeout: "300"
263
264	# 请求体大小
265	nginx.ingress.kubernetes.io/proxy-body-size: "50m"
266
267	# 限流
268	nginx.ingress.kubernetes.io/limit-rps: "10"
269
270	# WebSocket
271	nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
272	nginx.ingress.kubernetes.io/upstream-hash-by: "$request_uri"
273
274	# 跨域
275	nginx.ingress.kubernetes.io/enable-cors: "true"
276	nginx.ingress.kubernetes.io/cors-allow-origin: "*"
277	```
278
279	## Ingress 操作
280
281	```bash
282	# 查看 Ingress
283	kubectl get ingress
284	kubectl

People who liked this also viewed

6 picks

Type