nginx-ingress

How to use digicert with nginx-ingress to enable https

梦想与她 提交于 2020-01-14 05:38:08
问题 I'm trying to use the certificates obtained through digicert to enable https on my nginx-ingress. We've obtained a wildcard certificate and I have the following files. domain_name_2019-2021.csr domain_name_2019-2021.key domain_name_2019-2021.pem DigiCertCA2_2019-2021.pem star_domain_name_2019_2021.pem TrustedRoot.pem I've created the tls secrets by running the following commands kubectl create secret tls tls-secret --key ${KEY_FILE} --cert ${CERT_FILE} And used these secrets in my ingress

k8s, Ingress, Minio, and a Static Site

一个人想着一个人 提交于 2020-01-06 08:43:34
问题 We have a k8s cluster with an nginx Ingress and Minio installed. In Minio I have a bucket called tester with a hello world index.html file. I used the Minio MC client to set the tester bucket to public. Now I am able to see the hello world file when I visit my (altered) minio url like so: https://minio.example.com/tester/index.html . My goal is to set up an Ingress resource to access the public bucket. Here is my manifest to try and do so, however I only ever get a 404 error . . . ingress

Handling shared Kubernetes objects between multiple Helm charts

瘦欲@ 提交于 2020-01-06 07:17:32
问题 I've recently asked a question about how to structure multiple applications which should be bundled together and am thinking of going down a route of having each separate application have it's own Helm chart and own ingress controller. This would allow for CI/CD to update each component easily without affecting the rest. I was also thinking about using a "Umbrella" chart to specify versions of the other charts when it comes to actual releases and keep that in another repo. However, when using

Handling shared Kubernetes objects between multiple Helm charts

两盒软妹~` 提交于 2020-01-06 07:16:05
问题 I've recently asked a question about how to structure multiple applications which should be bundled together and am thinking of going down a route of having each separate application have it's own Helm chart and own ingress controller. This would allow for CI/CD to update each component easily without affecting the rest. I was also thinking about using a "Umbrella" chart to specify versions of the other charts when it comes to actual releases and keep that in another repo. However, when using

How to get around specifying “Host” header to access services pointed by Ingress controllers?

流过昼夜 提交于 2020-01-04 05:37:10
问题 My ingress controller is working and I am able to access the service outside the cluster using http://(externalIP)/path using an HTTP GET request from a RestClient. However, I had to specify the "Host" header with value = "host" (value of my Ingress Resource) for this to work. Because of this, I am not able to hit http://(externalIP)/path from my web browser. Is there any way I can enable access from my external web browser without having to specify "Host" in the request header? Ingress

Ingress controller to route TCP traffic

我只是一个虾纸丫 提交于 2019-12-24 18:42:47
问题 I'm trying to setup an ingress controller(nginx) to forward some TCP traffic to a kubernetes service(GCP). There's this tutorial that shows how to route HTTP traffic to services (based on the paths) using nginx. I want to have a similar setup to forward TCP traffic. In my cluster, I have a pod running a TCP echo server written in python using sockets. There is a service attached to the pod. If I set the service type of this service to LoadBalancer, I can run my client as follows and get the

Configuring RStudio Server service for nginx-ingress in GKE

你离开我真会死。 提交于 2019-12-24 16:26:12
问题 I've a Kubernetes cluster on GKE that has a nginx ingress controller sitting on top to mapping the RStudio Server endpoint under /rstudio/. This works quite well. Unfortunately, one of my deployments (RStudio Server) doensn't work properly because it uses client-side redirects during the login/logout which end ups in 404 error when trying to access /auth-login (it should be /rstudio/auth-login) In the past, when using a non-containerized install of RStudio Server, I used to sit an Apache

How to expose a Ingress for external access in Kubernetes?

安稳与你 提交于 2019-12-23 20:36:23
问题 I have a kubernetes cluster on a private network(private server, not aws or google cloud) and I created a Service to be able to access, however, I need to be able to access from outside the cluster and for this I created an Ingress and added ingress-nginx in the cluster. This is the YAML I'm using after making several attempts: apiVersion: extensions/v1beta1 kind: Ingress metadata: name: demo-ingress annotations: kubernetes.io/ingress.class: "nginx" nginx.ingress.kubernetes.io/ssl-redirect:

Kubernetes ingress-nginx - How can I disable listening on https if no TLS configured?

两盒软妹~` 提交于 2019-12-23 09:32:53
问题 I'm using kubernetes ingress-nginx and this is my Ingress spec. http://example.com works fine as expected. But when I go to https://example.com it still works, but pointing to default-backend with Fake Ingress Controller certificate. How can I disable this behaviour? I want to disable listening on https at all on this particular ingress, since there is no TLS configured. kind: Ingress apiVersion: extensions/v1beta1 metadata: name: http-ingress annotations: kubernetes.io/ingress.class: "nginx"

Configure Ingress controller to forward custom http headers

微笑、不失礼 提交于 2019-12-21 17:53:54
问题 We are setting up an AKS cluster on Azure, following this guide We are running 5 .Net Core API's behind an ingress controller, everything works fine, requests are being routed nicely. However, in our SPA Frontend, we are sending a custom http header to our API's, this header never seems to make it to the API's, when we inspect the logging in AKS we see the desired http header is empty. In development, everything works fine, we also see the http header is filled in our test environment in AKS,