apisix:node_listen: 9080              # APISIX listening portenable_ipv6: false
allow_admin:                  # http://nginx.org/en/docs/http/ngx_http_access_module.html#allow    - 0.0.0.0/0              # We need to restrict ip access rules for security. 0.0.0.0/0 is for test.
admin_key:- name: "admin"    key: edd1c9f034335f136f87ad84b625c8f1    role: admin                 # admin: manage all configuration data                                # viewer: only can view configuration data- name: "viewer"    key: 4054f7cf07e344346cd3f287985e76a2    role: viewer
enable_control: truecontrol:    ip: "0.0.0.0"    port: 9092


etcd:host:          # supports defining multiple etcd host addresses for an etcd cluster    - "http://192.168.31.170:2379"user: "root"    # ignore etcd username if not enable etcd authpassword: "root"  # ignore etcd password if not enable etcd auth
discovery:nacos:    host:    - "http://47.100.213.49:8848"    prefix: "/nacos/v1/"    fetch_interval: 30    # default 30 sec    weight: 100           # default 100    timeout:    connect: 2000       # default 2000 ms    send: 2000          # default 2000 ms    read: 5000          # default 5000 ms

plugin_attr:prometheus:    export_addr:    ip: "0.0.0.0"    port: 9091
plugins:- client-control- ext-plugin-pre-req- zipkin- request-id- fault-injection- serverless-pre-function- batch-requests- cors- ip-restriction- ua-restriction- referer-restriction- uri-blocker- request-validation- openid-connect- wolf-rbac- hmac-auth- basic-auth- jwt-auth- key-auth- consumer-restriction- authz-keycloak- proxy-mirror- proxy-cache- proxy-rewrite- api-breaker- limit-conn- limit-count- limit-req- gzip- server-info- traffic-split- redirect- response-rewrite- grpc-transcode- prometheus- echo- http-logger- sls-logger- tcp-logger- kafka-logger- syslog- udp-logger- serverless-post-function- ext-plugin-post-req
stream_plugins:- ip-restriction- limit-conn- mqtt-proxy

# 将config.yaml 存储到k8s的configmap中kubectl create configmap sukt-apisix-gateway-config --from-file=config.yaml=/home/sukt-platform/apisix/apisix-gateway-config.yaml -n sukt-platform

apiVersion: apps/v1kind: Deploymentmetadata:name: sukt-apisix-gatewaynamespace: sukt-platformspec:selector:    matchLabels:    app: sukt-apisix-gatewaytemplate:    metadata:    labels:        app: sukt-apisix-gateway    spec:    containers:    - name: sukt-apisix-gateway        image: apache/apisix:2.10.3-alpine        imagePullPolicy: IfNotPresent        resources:        limits:            cpu: 500m            memory: 1Gi        requests:            cpu: 250m            memory: 256Mi        securityContext:        privileged: false        terminationMessagePath: /dev/termination-log        terminationMessagePolicy: File        volumeMounts:        - mountPath: /usr/local/apisix/conf/config.yaml        name: config        subPath: config.yaml        ports:        - containerPort: 9080        - containerPort: 9443    dnsPolicy: ClusterFirst    restartPolicy: Always    schedulerName: default-scheduler    securityContext: {}    terminationGracePeriodSeconds: 30    volumes:        - configMap:            defaultMode: 420            name: sukt-apisix-gateway-config        name: config

apiVersion: v1kind: Servicemetadata:name: sukt-apisix-gateway-nodetypelabels:    app: sukt-apisix-gateway-nodetypenamespace: sukt-platformspec:type: NodePortselector:    app: sukt-apisix-gatewayports:- port: 9080    name: transfer1    targetPort: 9080    nodePort: 30107- port: 9443    name: transfer2    targetPort: 9443    nodePort: 30108

## Licensed to the Apache Software Foundation (ASF) under one or more# contributor license agreements.  See the NOTICE file distributed with# this work for additional information regarding copyright ownership.# The ASF licenses this file to You under the Apache License, Version 2.0# (the "License"); you may not use this file except in compliance with# the License.  You may obtain a copy of the License at##     http://www.apache.org/licenses/LICENSE-2.0## Unless required by applicable law or agreed to in writing, software# distributed under the License is distributed on an "AS IS" BASIS,# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.# See the License for the specific language governing permissions and# limitations under the License.#conf:listen:    host: 0.0.0.0     # `manager api` listening ip or host name    port: 9000          # `manager api` listening portallow_list:           # If we don't set any IP list, then any IP access is allowed by default.    - 0.0.0.0/0etcd:    endpoints:          # supports defining multiple etcd host addresses for an etcd cluster    - "http://192.168.31.170:2379"                        # yamllint disable rule:comments-indentation                        # etcd basic auth info    username: "root"    # ignore etcd username if not enable etcd auth    password: "root"  # ignore etcd password if not enable etcd auth    mtls:    key_file: ""          # Path of your self-signed client side key    cert_file: ""         # Path of your self-signed client side cert    ca_file: ""           # Path of your self-signed ca cert, the CA is used to sign callers' certificates    # prefix: /apisix     # apisix config's prefix in etcd, /apisix by defaultlog:    error_log:    level: warn       # supports levels, lower to higher: debug, info, warn, error, panic, fatal    file_path:        logs/error.log  # supports relative path, absolute path, standard output                        # such as: logs/error.log, /tmp/logs/error.log, /dev/stdout, /dev/stderr    access_log:    file_path:        logs/access.log  # supports relative path, absolute path, standard output                        # such as: logs/access.log, /tmp/logs/access.log, /dev/stdout, /dev/stderr                        # log example: 2020-12-09T16:38:09.039+0800  INFO  filter/logging.go:46  /apisix/admin/routes/r1  {"status": 401, "host": "127.0.0.1:9000", "query": "asdfsafd=adf&a=a", "requestId": "3d50ecb8-758c-46d1-af5b-cd9d1c820156", "latency": 0, "remoteIP": "127.0.0.1", "method": "PUT", "errs": []}authentication:secret:    secret              # secret for jwt token generation.                        # NOTE: Highly recommended to modify this value to protect `manager api`.                        # if it's default value, when `manager api` start, it will generate a random string to replace it.expire_time: 3600     # jwt token expire time, in secondusers:                # yamllint enable rule:comments-indentation    - username: admin   # username and password for login `manager api`    password: P@ssW0rd    - username: user    password: P@ssW0rd
plugins:                          # plugin list (sorted in alphabetical order)- api-breaker- authz-keycloak- basic-auth- batch-requests- consumer-restriction- cors# - dubbo-proxy- echo# - error-log-logger# - example-plugin- fault-injection- grpc-transcode- hmac-auth- http-logger- ip-restriction- jwt-auth- kafka-logger- key-auth- limit-conn- limit-count- limit-req# - log-rotate# - node-status- openid-connect- prometheus- proxy-cache- proxy-mirror- proxy-rewrite- redirect- referer-restriction- request-id- request-validation- response-rewrite- serverless-post-function- serverless-pre-function# - skywalking- sls-logger- syslog- tcp-logger- udp-logger- uri-blocker- wolf-rbac- zipkin- server-info- traffic-split2.2.2、使用kubectl命令创建configmap# 将config.yaml 存储到k8s的configmap中kubectl create configmap sukt-apisix-dashboard-config --from-file=config.yaml=/home/sukt-platform/apisix/apisix-dashboard-config.yaml -n sukt-platform

apiVersion: apps/v1kind: Deploymentmetadata:name: sukt-apisix-dashboardnamespace: sukt-platformspec:selector:    matchLabels:    app: sukt-apisix-dashboardtemplate:    metadata:    labels:        app: sukt-apisix-dashboard    spec:    nodeName: microk8sslave1 # 部署到指定的node节点    containers:    - name: sukt-apisix-dashboard        image: apache/apisix-dashboard:2.10.1-alpine        imagePullPolicy: IfNotPresent        resources:        limits:            cpu: 500m            memory: 1Gi        requests:            cpu: 250m            memory: 256Mi        securityContext:        privileged: false        terminationMessagePath: /dev/termination-log        terminationMessagePolicy: File        volumeMounts:        - mountPath: /usr/local/apisix-dashboard/conf/conf.yaml        name: config        subPath: config.yaml #这个位置对应的是comfigmap中的名字，不是 /usr/local/apisix-dashboard/conf/conf.yaml        ports:        - containerPort: 9000    dnsPolicy: ClusterFirst    restartPolicy: Always    schedulerName: default-scheduler    securityContext: {}    terminationGracePeriodSeconds: 30    volumes:        - configMap:            defaultMode: 420            name: sukt-apisix-dashboard-config        name: config

apiVersion: v1kind: Servicemetadata:name: sukt-apisix-dashboard-nodetypelabels:    app: sukt-apisix-dashboard-nodetypenamespace: sukt-platformspec:type: NodePortselector:    app: sukt-apisix-dashboardports:- port: 9000    name: transfer1    targetPort: 9000    nodePort: 30109