如何在路由器中为Istio入口网关配置传入端口

Question

我尝试使用openshift路由配置istio入口。据我所知，请求路径如下：

request -> route -> ingress service -> gateway -> virtual service -> app service -> app

kind: Route
  ...
spec:
  host: my-app.com
    to:
      kind: Service
      name: ingress-service
      weight: 100
    port:
      targetPort: http
  ...

kind: Service
metadata:
  name: ingress-service
...
spec:
  ports:
    - name: status-port
      protocol: TCP
      port: 15020
      targetPort: 15020
    - name: http
      protocol: TCP
      port: 9080
      targetPort: 9080
  selector:
    app: ingressgateway
    istio: ingressgateway
  type: ClusterIP 

kind: Gateway
metadata:
  name: ingress-gw
...
spec:
  servers:
    - hosts:
        - my-app.com
      port:
        name: http
        number: 9080
        protocol: HTTP
  selector:
    istio: ingressgateway

kind: VirtualService
...
spec:
  hosts:
    - my-app.com
  gateways:
    - ingress-gw
  http:
    - route:
      - destination:
          host: my-app
          port: 9080
  exportTo:
    - .

Answer 1

外部暴露的端口号取决于OpenShift上的路由器（HAProxy）pod侦听端口。如果您想要9080端口而不是80，您应该更改路由器（HAProxy）POD上的端口。或者您可以处理LB上的端口号以使用其他端口号。

访问流程如下。

LB(80, 443) 
   -> Router pod(80, 443) 
      -> Ingress-Gateway pod
         -Through Gateway and VirtualService -> Backend pod