AKS集成Application Gateway遇Ingress主机空及502错误求助

问题现象 #

通过Terraform在Azure部署AKS、VNet、应用网关、公网IP，为应用网关和AKS配置独立子网并启用应用网关作为AKS的Ingress后，部署guestbook示例应用及对应Ingress配置出现以下问题：

• Ingress的CLASS列显示<none>，HOSTS列显示*
• 访问绑定的DNS返回502错误
• 应用网关后端池无任何条目

手动创建相同资源时应用可正常运行，已排查端口配置但未解决问题。

资源组配置情况 #

• VNet、公网IP、应用网关、AKS、安全组归属于同一资源组
• AKS代理池、身份、负载均衡器归属于另一资源组
• 未配置VNet对等连接（应用网关与AKS同属一个VNet）

执行命令 #

kubectl create -f guestbook-all-in-one.yaml
kubectl apply -f simple-frontend-ingress.yaml

Ingress配置文件 #

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: simple-frontend-ingress
  annotations:
    kubernetes.io/ingress.class: azure/application-gateway
spec:
  rules:
  - http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: frontend
            port: 
              number: 80

kubectl命令输出 #

ashish [ ~ ]$ kubectl get ingress
NAME                      CLASS    HOSTS   ADDRESS         PORTS   AGE
simple-frontend-ingress   <none>   *       20.xxx.xx.201   80      13s

ashish [ ~ ]$ kubectl get service
NAME            TYPE        CLUSTER-IP    EXTERNAL-IP   PORT(S)        AGE
frontend        NodePort    10.20.0.xxx   <none>        80:31157/TCP   24m
kubernetes      ClusterIP   10.20.0.x     <none>        443/TCP        52m
redis-master    ClusterIP   10.20.0.2xx   <none>        6379/TCP       24m
redis-replica   ClusterIP   10.20.0.1xx   <none>        6379/TCP       24m

ashish [ ~ ]$ kubectl describe service frontend
Name:                     frontend
Namespace:                default
Labels:                   app=guestbook
                          tier=frontend
Annotations:              <none>
Selector:                 app=guestbook,tier=frontend
Type:                     NodePort
IP Family Policy:         SingleStack
IP Families:              IPv4
IP:                       10.20.0.110
IPs:                      10.20.0.110
Port:                     <unset>  80/TCP
TargetPort:               80/TCP
NodePort:                 <unset>  31157/TCP
Endpoints:                10.10.1.103:80,10.10.1.50:80,10.10.1.90:80
Session Affinity:         None
External Traffic Policy:  Cluster
Events:                   <none>

内容的提问来源于stack exchange，提问作者Ashish Mishra