31. 새로 추가된 시험 유형 - 2 / Gateway API Migration

[Question]

Migrate an existing web application from Ingress to Gateway API. We must maintain HTTP Success. 
A GatewayClass name nginx is installed in the cluster.

First, create a Gateway named web-gateway with hostname gateway.web.k8s.local that maintains 
the existing TLS and listener configuration from the existing ingress resource named web.
Next, create an HTTPRoute named web-route with hostname gateway.web.k8s.local that maintains 
the existing routing rules from the current Ingress resource named web.

You can test your Gateway API configuration with the following command:
[candidate@cka2025] $ curl https: //gateway.web.k8s.local

Finally, delete the existing Ingress resource named web.

 

---

 

[Precondition]

(1) 테스트에 사용할 ingress, deployment, namespace, service 생성 

---
apiVersion: v1
kind: Namespace
metadata:
  name: web
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: web-app
  namespace: web
spec:
  replicas: 2
  selector:
    matchLabels:
      app: web-app
  template:
    metadata:
      labels:
        app: web-app
    spec:
      containers:
        - name: nginx
          image: nginx:1.25-alpine
          ports:
            - containerPort: 80
          readinessProbe:
            httpGet:
              path: /
              port: 80
            initialDelaySeconds: 2
            periodSeconds: 5
          livenessProbe:
            httpGet:
              path: /
              port: 80
            initialDelaySeconds: 5
            periodSeconds: 10
---
apiVersion: v1
kind: Service
metadata:
  name: web-svc
  namespace: web
spec:
  selector:
    app: web-app
  ports:
    - name: http
      port: 80
      targetPort: 80
  type: ClusterIP
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: web
  namespace: web
  annotations:
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
spec:
  ingressClassName: nginx
  tls:
    - hosts:
        - gateway.web.k8s.local
      secretName: web-tls
  rules:
    - host: gateway.web.k8s.local
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: web-svc
                port:
                  number: 80

 

 

(2) 테스트에 사용할 TLS secret 생성

# 1) 키/인증서 생성
openssl req -x509 -nodes -newkey rsa:2048 \
  -subj "/CN=gateway.web.k8s.local" \
  -keyout tls.key -out tls.crt -days 365

# 2) 시크릿 생성
kubectl -n web create secret tls web-tls --cert=tls.crt --key=tls.key

kubectl apply -f prereq-ingress-web.yaml
kubectl -n web rollout status deploy/web-app
kubectl -n web get ingress web

 

 

---

[Solve]

- gateway 생성 / https, 443 포트 변경

- httproute 생성 /