kubernetes-ingress

Kubernetes and AAD authentication

瘦欲@ 提交于 2019-12-01 20:50:32
问题 On configured AKS there is docker container with application that is using AAD authentication. Based on this article there is also configured ingress. API is working well. When I add to Azure Active Directory application registration reply URL with https prefix I receive error "The reply url specified in the request does not match the reply urls configured for the application". And I see that in browser address line redirect_uri is starting with http. When I add reply URL that is starting

What Azure Kubernetes (AKS) 'Time-out' happens to disconnect connections in/out of a Pod in my Cluster?

本秂侑毒 提交于 2019-12-01 17:32:51
I have a working Cluster with services that all respond behind a helm installed Ingress nGinx running on Azure AKS. This ended up being Azure specific. My question is: Why does my connection to the services / pods in this cluster periodically get severed (apparently by some sort of idle timeout), and why does that connection severing appear to also coincide with my Az AKS Browse UI connection getting cut? This is an effort to get a final answer on what exactly triggers the time-out that causes the local 'Browse' proxy UI to disconnect from my Cluster (more background on why I am asking to

Issue with Kubernetes ingress routing to Nextjs applications

余生颓废 提交于 2019-12-01 11:10:53
问题 So I have an interesting use case. I am running multiple micro-services on my Kubernetes cluster. My applications use NextJS which make internal calls to _next routes. My issue came from the fact that I needed a way to differentiate between services and their requests to the _next files. So I implemented NextJS's assetPrefix feature which works perfectly in development, appending my prefix in front of _next so the requests look like .../${PREFIX}/_next/... . That way I could set up an ingress

How can I apply pod selector and namespace selector, both, in the same ingress rule?

為{幸葍}努か 提交于 2019-12-01 08:25:10
Kubernetes documentation example here shows how a network policy can be applied for a source specified by either a pod selector OR a namespace selector. Can I specify a source the fulfills both constraints at the same time. e.g. Can a source be a pod with label "tier=web" which is deployed in namespace "ingress". P.S. For now, I have it working by adding namespace name as pod-labels. Yes, this is possible, but not immediately intuitive. If you look at the section below the chunk you linked, it gives a pretty good explanation (this appears to have been added after you asked your question). The

nginx-ingress: Too many redirects when force-ssl is enabled

 ̄綄美尐妖づ 提交于 2019-12-01 06:29:28
I am setting up my first ingress in kubernetes using nginx-ingress. I set up the ingress-nginx load balancer service like so: { "kind": "Service", "apiVersion": "v1", "metadata": { "name": "ingress-nginx", "namespace": "...", "labels": { "k8s-addon": "ingress-nginx.addons.k8s.io" }, "annotations": { "service.beta.kubernetes.io/aws-load-balancer-backend-protocol": "tcp", "service.beta.kubernetes.io/aws-load-balancer-proxy-protocol": "*", "service.beta.kubernetes.io/aws-load-balancer-ssl-cert": "arn....", "service.beta.kubernetes.io/aws-load-balancer-ssl-ports": "443" } }, "spec": { "ports": [ {

nginx-ingress: Too many redirects when force-ssl is enabled

时光总嘲笑我的痴心妄想 提交于 2019-12-01 05:19:30
问题 I am setting up my first ingress in kubernetes using nginx-ingress. I set up the ingress-nginx load balancer service like so: { "kind": "Service", "apiVersion": "v1", "metadata": { "name": "ingress-nginx", "namespace": "...", "labels": { "k8s-addon": "ingress-nginx.addons.k8s.io" }, "annotations": { "service.beta.kubernetes.io/aws-load-balancer-backend-protocol": "tcp", "service.beta.kubernetes.io/aws-load-balancer-proxy-protocol": "*", "service.beta.kubernetes.io/aws-load-balancer-ssl-cert":

What's the exactly flow chart of an outside request comes into k8s pod via Ingress?

非 Y 不嫁゛ 提交于 2019-11-30 08:53:01
问题 all I knew well about k8s' nodePort and ClusterIP type in services. But I am very confused about the Ingress way, because how will a request come into a pod in k8s by this Ingress way? Suppose K8s master IP is 1.2.3.4 , after Ingress setup, and can connect to backend service(e.g, myservice ) with a port(e.g, 9000 ) Now, How can I visit this myservice:9000 outside? i.e, through 1.2.3.4 ? As there's no entry port on the 1.2.3.4 machine. And many docs always said visit this via 'foo.com'

What's the difference between exposing nginx as load balancer vs Ingress controller?

馋奶兔 提交于 2019-11-30 04:02:36
I understood Ingress can be used when we want to expose multiple service/routes with a single Load Balancer / public IP. Now I want to expose my Nginx server to public. I have two choices Set service type as LoadBalancer voila I got public IP Use Nginx Ingress Controller Now I can get my job done with Option 1 when or why would I choose Option 2 whats the advantage of having nginx with Ingress without Ingress ? suren There is a difference between ingress rule (ingress) and ingress controller . So, technically, nginx ingress controller and LoadBalancer type service are not comparable. You can

Implementing workaround for missing http->https redirection in ingress-gce with GLBC

依然范特西╮ 提交于 2019-11-29 15:28:01
I am trying to wrap my brain around the suggested workarounds for the lack of built-in HTTP->HTTPS redirection in ingress-gce, using GLBC. What I am struggling with is how to use this custom backend that is suggested as one option to overcome this limitation (e.g. in How to force SSL for Kubernetes Ingress on GKE ). In my case the application behind the load-balancer does not itself have apache or nginx, and I just can't figure out how to include e.g. apache (which I know way better than nginx) in the setup. Am I supposed to set apache in front of the application as a proxy? In that case I

ingress-nginx - create one ingress per host? Or combine many hosts into one ingress and reload?

独自空忆成欢 提交于 2019-11-29 07:55:39
I'm building a service where users can build web apps - these apps will be hosted under a virtual DNS name *.laska.io For example, if Tom and Jerry both built an app, they'd have it hosted under: tom.laska.io jerry.laska.io Now, suppose I have 1000 users. Should I create one big ingress that looks like this? apiVersion: extensions/v1beta1 kind: Ingress metadata: name: nginx-ingress annotations: kubernetes.io/ingress.class: nginx nginx.ingress.kubernetes.io/ssl-redirect: "false" spec: rules: - host: tom.laska.io http: paths: - backend: serviceName: nginx-service servicePort: 80 - host: jerry