docker-compose 部署 Kong

Kong lua 插件开发

---

部署 Kong 网关 测试插件

使用docker-compose部署 kong 网关

cat > docker-compose.yaml << ERIC

version: "3"

networks:
 kong-net:
  driver: bridge

services:


  #######################################
  # Postgres: The database used by Kong
  #######################################
  kong-database:
    container_name: kong-database
    image: postgres:9.6
    restart: always
    networks:
      - kong-net
    environment:
      TZ: Asia/Shanghai
      POSTGRES_USER: kong
      POSTGRES_DB: kong
      POSTGRES_PASSWORD: kong
    ports:
      - 5432:5432
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "kong"]
      interval: 5s
      timeout: 5s
      retries: 5
    volumes:
      - /etc/localtime:/etc/localtime
      - ./config/kong_data:/var/lib/postgresql/data


  #######################################
  # Kong database migration
  #######################################
  kong-migration:
    container_name: kong-migration
    image: kong:2.8.1
    command: "kong migrations bootstrap"
    networks:
      - kong-net
    restart: on-failure
    environment:
      TZ: Asia/Shanghai
      KONG_DATABASE: postgres
      KONG_PG_HOST: kong-database
      KONG_PG_DATABASE: kong
      KONG_PG_PASSWORD: kong
    links:
      - kong-database
    depends_on:
      - kong-database
    volumes:
      - /etc/localtime:/etc/localtime


  #######################################
  # Kong: The API Gateway
  #######################################
  kong-gateway:
    container_name: kong-gateway
    image: kong:2.8.1
    restart: always
    privileged: true
    user: root
    networks:
      - kong-net
    environment:
      TZ: Asia/Shanghai
      KONG_DATABASE: postgres
      KONG_PG_HOST: kong-database
      KONG_PG_PASSWORD: kong
      KONG_PROXY_LISTEN: 0.0.0.0:8000
      KONG_PROXY_LISTEN_SSL: 0.0.0.0:8443
      KONG_ADMIN_LISTEN: 0.0.0.0:8001
    depends_on:
      - kong-migration
    links:
      - kong-database
    healthcheck:
      test: ["CMD", "kong", "health"]
      interval: 10s
      timeout: 10s
      retries: 10
    ports:
      - 8001:8001
      - 8000:8000
      - 8443:8443
    volumes:
      - /etc/localtime:/etc/localtime
      # 此目录是自己生成的，用来存放插件
      - ./config/plugins:/opt/share/kong/plugins
      # 一般情况下 /etc/kong 里是没有 kong.conf，只有 kong.conf.default 和 kong.logrotate
      # 可以把 kong.conf.default 拷贝成 kong.conf 才可生效
      - ./config/kong/kong.conf:/etc/kong/kong.conf


  #######################################
  # Konga database prepare
  #######################################
  konga-prepare:
    container_name: konga-prepare
    image: pantsel/konga:0.14.9
    command: "-c prepare -a postgres -u postgresql://kong:kong@kong-database:5432/konga"
    networks:
      - kong-net
    restart: on-failure
    environment:
      TZ: Asia/Shanghai
      KONG_DATABASE: postgres
      KONG_PG_HOST: kong-database
      KONG_PG_DATABASE: konga
      KONG_PG_PASSWORD: kong
    links:
      - kong-database
    depends_on:
      - kong-database
    volumes:
      - /etc/localtime:/etc/localtime


  #######################################
  # Konga: Kong GUI
  #######################################
  kong-gui:
    container_name: kong-gui
    image: pantsel/konga:0.14.9
    restart: always
    networks:
     - kong-net
    environment:
      TZ: Asia/Shanghai
      DB_ADAPTER: postgres
      DB_URI: postgresql://kong:kong@kong-database:5432/konga
      NODE_ENV: production
    links:
      - kong-database
    depends_on:
      - kong-gateway
      - konga-prepare
    ports:
      - 1337:1337
    volumes:
      - /etc/localtime:/etc/localtime


ERIC

---

把自定义插件加入服务中

1. 先把代码(handler.lua、schema.lua)放到 ./config/plugins/lua-encrypt文件夹下，/lua-encrypt Kong会将文件夹的名做为插件的名
2. 修改/etc/kong/kong.conf文件，告诉 Kong 服务启动的时候要加载自定义插件

cat >> config/kong/kong.conf << ERIC

lua_package_path = /opt/share/?.lua;;
plugins = bundled,lua-encrypt

ERIC

kong.conf配置文件解释说明

## 指定自定义插件目录
## 我们的插件准备放在容器中的/opt/share/kong/plugins目录下(这个目录是由docker-compose启动容器时自动创建的)
## 注意指定插件目录前缀(不能包含/kong/plugins)
lua_package_path = /opt/share/?.lua;;

## 一般情况下/etc/kong里是没有kong.conf，只有kong.conf.default和kong.logrotate
## 把kong.conf.default拷贝成kong.conf即可生效(这里采用了docker-compose替换文件的方式来做)
#### 解释: plugins = bundled,<plugin-name>
#### 如果你不需要kong自带的插件，可以取消掉 bundled (bundled 就是指/usr/local/share/lua/5.1/kong/plugins目录中的默认插件是否使用)
#### lua-encrypt是自定义插件的名称
plugins = bundled,lua-encrypt

---

---

---

启动 Kong 服务

docker-compose up -d


## 查看结果
[root@centos01 ~]# docker-compose ps
     Name                   Command                  State                                                                   Ports
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
kong-database    docker-entrypoint.sh postgres    Up (healthy)   0.0.0.0:5432->5432/tcp,:::5432->5432/tcp
kong-gateway     /docker-entrypoint.sh kong ...   Up (healthy)   0.0.0.0:8000->8000/tcp,:::8000->8000/tcp, 0.0.0.0:8001->8001/tcp,:::8001->8001/tcp, 0.0.0.0:8443->8443/tcp,:::8443->8443/tcp,
                                                                 8444/tcp
kong-gui         /app/start.sh                    Up             0.0.0.0:1337->1337/tcp,:::1337->1337/tcp
kong-migration   /docker-entrypoint.sh kong ...   Exit 0
konga-prepare    /app/start.sh -c prepare - ...   Exit 0

---

测试

访问Web: http://127.0.0.1:1337

---

---

---