如何在NGINX Ingress Controller中禁用斜杠合并适配RabbitMQ

问题场景 #

创建Ingress访问RabbitMQ管理控制台，当前配置如下：

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: rabbitmq-ingress
  namespace: rabbimq
  annotations:
    nginx.ingress.kubernetes.io/use-regex: "true"
    nginx.ingress.kubernetes.io/rewrite-target: /$2
spec:
  ingressClassName: nginx
  rules:
    - host: "myhost.com"
      http:
          paths:
            - backend:
                service:
                  name: rabbitmq
                  port:
                    number: 15672
              path: "/rabbit(/|$)(.*)"
              pathType: Prefix

通过该Ingress可部分访问控制台，但RabbitMQ生成的URL如myhost.com/rabbit/#/queues/%2F/my-queue（%2F为默认vhost的编码），会被NGINX解码后将连续斜杠合并为单个，导致URL变为myhost.com/rabbit/#/queues///my-queue，引发访问问题。

尝试添加configuration-snippets注解设置merge_slashes off时出现错误："merge_slashes" directive is not allowed here in /etc/nginx/nginx.conf；改用server-snippets注解无报错，但问题仍未解决。

解决方案 #

方案一：通过RabbitMQ配置上下文路径（推荐） #

直接让RabbitMQ管理控制台知晓自身访问前缀为/rabbit，生成的链接会自动带上正确前缀，无需NGINX复杂重写规则：

• 修改RabbitMQ的Deployment/StatefulSet，添加环境变量：

  env:
    - name: RABBITMQ_MANAGEMENT_PATH
      value: "/rabbit"
  

• 调整Ingress配置，移除重写相关注解，简化路径匹配：

  apiVersion: networking.k8s.io/v1
  kind: Ingress
  metadata:
    name: rabbitmq-ingress
    namespace: rabbimq
    annotations:
      nginx.ingress.kubernetes.io/merge-slashes: "off" # 关闭斜杠合并
  spec:
    ingressClassName: nginx
    rules:
      - host: "myhost.com"
        http:
            paths:
              - backend:
                  service:
                    name: rabbitmq
                    port:
                      number: 15672
                path: "/rabbit"
                pathType: Prefix
  

方案二：正确配置NGINX Ingress的merge_slashes #

若无法修改RabbitMQ配置，需确保merge_slashes off生效，同时调整重写规则：

• 使用server-snippets注解在server块中关闭斜杠合并，同时开启尾斜杠保留：

  apiVersion: networking.k8s.io/v1
  kind: Ingress
  metadata:
    name: rabbitmq-ingress
    namespace: rabbimq
    annotations:
      nginx.ingress.kubernetes.io/use-regex: "true"
      nginx.ingress.kubernetes.io/rewrite-target: /$2
      nginx.ingress.kubernetes.io/server-snippets: |
        merge_slashes off;
        preserve_trailing_slash on;
  spec:
    ingressClassName: nginx
    rules:
      - host: "myhost.com"
        http:
            paths:
              - backend:
                  service:
                    name: rabbitmq
                    port:
                      number: 15672
                path: "/rabbit(/|$)(.*)"
                pathType: Prefix
  

• 注意：merge_slashes是server级指令，必须放在server-snippets中（configuration-snippets是插入到location块，该指令不允许在此处使用）。若之前用server-snippets未生效，需检查NGINX Ingress Controller版本，确保使用较新版本。

内容的提问来源于stack exchange，提问作者Mulu