How to use NGINX Ingress with Kubernetes in 2023
Вставка
- Опубліковано 23 чер 2024
- Subscribe to show your support! goo.gl/1Ty1Q2 .
Patreon 👉🏽 / marceldempers
Checkout the source code below 👇🏽 and follow along 🤓
Also if you want to support the channel further, become a member 😎
marceldempers.dev/join
Checkout "That DevOps Community" too
marceldempers.dev/community
Source Code 🧐
--------------------------------------------------------------
github.com/marcel-dempers/doc...
If you are new to Kubernetes, check out my getting started playlist on Kubernetes below :)
Kubernetes Guide for Beginners:
---------------------------------------------------
• Kubernetes development...
Kubernetes Monitoring Guide:
-----------------------------------------------
• Kubernetes Monitoring ...
Kubernetes Secret Management Guide:
--------------------------------------------------------------
• Kubernetes Secret Mana...
Datree
• Roadmap to Kubernetes ...
Like and Subscribe for more :)
Follow me on socials!
marceldempers.dev
Twitter | / marceldempers
GitHub | github.com/marcel-dempers
Facebook | thatdevopsguy
LinkedIn | / marceldempers
Instagram | / thatdevopsguy
Music:
Track: Reckoner - lofi hip hop chill beats for study~game~sleep | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / reckoner-lofi-hip-hop-...
Track: Fox Beat 2 - Kronicle - Chill Noons - Royalty Free Vlog Music [BUY=FREE] | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / kronicle-chill-noons-r...
Track: Fox Beat 2 - Jeff Kalee - Pillow Talk - Royalty Free Vlog Music [BUY=FREE] | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / jeff-kalee-pillow-talk...
Track: souKo - souKo - Parallel | is licensed under a Creative Commons Attribution licence (creativecommons.org/licenses/...)
Listen: / parallel
Timestamps
00:00 Introduction
01:12 Source Code
01:59 Create a Kubernetes cluster
02:51 Install some tools
05:27 Datree Sponsor
07:02 Install NGINX Ingress
10:33 Ingress service and port forward
12:55 Deploy some microservices for testing
16:08 Basic routing by domain
20:09 Basic routing by path
24:24 URL rewriting
28:31 SSL and Passthrough
29:42 IP Whitelisting
30:37 Authentication
33:07 Customization using Configmaps
38:01 Outtro - Наука та технологія
This channel is amazing. Thank you so much for taking the time to create these videos!
I just discover your channel and it's an absolute gem. Thank you for sharing you knowledge, good sir.
I've never ever seen before such a good followable introduction of any kind of Kubernetes topics! Really, really professional videos, what you are doing! Thanks a lot for that!
after 5 days of not getting Nginx Ingress to work this Video has sorted me out, thank you!...
It is always great to watch videos from really knowledgeable people - thank you!
You and your contents are awesome. Quick guides, quick starts, hands on and labs, all explained easily and and easy to follow. Since I'm following and learning since a long time. I wanted to take this time to say Thanks again.
🙏🏽🙏🏽
Very high quality of information, nice speech and quite understandable. Thank you!
I love this… incredibly useful for me. thanks man. keep going ❤
Thanks for your detailed explanation. I have managed to setup my ingress by looking at this video.
Awesome as always!
Thanks a bunch for sharing, mate!
This is a great guide, thank you very much for it! It really helps!
Suoer useful video! It's thousands times better than most of useless online cources! The author's explanation with the video-examples - very clear and awesome! Thank you @That DevOps Guy
This is amazing, just what I needed!
Thank you this helped a lot!
Pure gold - thanks :)
Excellent video, just what I needed.
the man, the myth the legend. Thanks for the tutorial mate.
Fantastic as always Marcel! Love it man you win UA-camr of the year all.the.time! Thank you!
Great explanation, thanks!
Excellent explanation sir.. Grt fan of u
Awesome effort. Thanks a lot
Always, Excellent
Great video! Absolutely love the quality of your content. Would you make a video on microservice authentication with keycloak or an alternative? I am unable to find a quality explanation.
Great video!!!
well explained 👍
You are so good . Nice video
I was making my keyboard into a permanent addition to my forehead before seeing the part about editing my hosts file...
I went from finding ways to abandon K8's altogether to getting excited for tonight's work session. Thank you!
Have seen many other videos on same topic, but your content and way of explaining is at par over others....learned lot of things from your channel....keep up the great work...also if you could please create a video on deploying security policies in k8s cluster, eg. Security Context and how to get them working...
thanks for the videos once again ! just a small FYI, I think the last few videos have a bit overamplified sound, sound is just a tad distorted :D
I've noticed similar during post-production and have to drop audio dB on clips significantly.
Not sure what the cause is, but it may be time for a new Mic
Very helpful video🙌..Also can you make video on how to use multiple ingress controller on multiple namespace for multiple application.
Hi
The explanation on the videos are amazing...Are you planning to do any videos on cilium..
Good content and good understanding of Kubernetes. The videos are slower now and much fewer camera angles which is good.
The removal of the natural pauses by your editing team makes it still difficult to absorb the material as it seems it is one long sentence.
Subscribed 😊
Hey, would be nice to post a video on some advanced NGINX setup like for example how to expose custom TCP UDP ports.
I love you bro this is awesome
Thanks Marcel for the great video, can you please maybe do a tutorial on how to expose fastcgi application, that would be great!
You are the Best✌
Great vid! Do you use docker desktop or install docker to your wsl2?
I have both
OMG. what an explanation man. You r just awesome. Finally I'm on the right place to explore K8S
You need to drop us a playlist.. you know which music I’m talking about too 👹
Thank you for the lovely content , like always!
Amazing video, but the first capturing group is either the / or the $ as specified in the first capturing group in the path value, not the domain name, or am I wrong?
i like your style,
when i open a tut on your channel i get a sense that you like rnb?
why i think that lol
Hi. Can you point me to the web cam that you are using in your videos?
Hi, nice video as always...I'm studying for the PCA exam and I'm following your videos about Prometheus (Pretty good stuff) and I've setup a small RKE2 cluster in top of DigitalOcean and right now I'm stuck to get that EXTERNAL-IP address, I'm trying to follow this video here, but not only this one...but basically every tutorial out there it only show how to do it using local clusters...kind, k3d and etc. What about not using port-forwarding...and not using the K8S of the cloud for this? What are the options? Could you do a video for this? You're channel it's awesome! Cheers
I'm also looking for that only. Pls share if you got the answer.
Is there a way to change the ingress controller timestamp to IST?
Hi Marcel, many thanks for your tutorial !! I have some problem with rke2, 1 master , 2 agent installed without cloud .... nginx don't redirect the traffic
Do you think that having a minikube cluster instead of a kind one would change things a lot? I have had a hard time using nginx controller to expose minikube ClusterIP services. In minikube there is an "ingress enable" feature that auto installs the controller, but I also did the manual installation through yaml. Maybe I have to work on the port-forward commands that in the end do a lot of the packet routing needed. Thanks for the video.
I'm using Big Sur and I've ended up switching to kind instead of minikube. All is pretty easy with kind. But there are issues with port-forwarding in minikube for such purposes.
Great tutorial, thanks!. Quick question, wouldn't it be better if we let helm manage and keep track of the nginx app/charts versions so that we can easily upgrade/rollback the app ?
I mean, why not using "helm upgrade", "helm rollback" ... etc. ?
You can totally do that
Helm is just a package manager.
Depending how you manage your infrastructure (GitOps/Argo/Flux/Terraform) that part is totally up to you.
What in case if I want to route my traffic to services residing in different namespaces ?
I see that the stated work of Ingress is actually done by port forwarding.
How can we create a diff ngnx ingress to support https protocol
I need help, I have two python services running in pods and I want nginx to act as load balancer to route traffic, I see the state of nginx pod is in pending state.. the data that is coming to my nginx pod is through socket tcp ... Do I need ingress here ??
Hi, I know this is a bit off-topic, but I have a question. I'm using ingress-nginx on EKS with an NLB (externalTrafficPolicy: Local), and my target group instances are showing as unhealthy. Any advice on resolving this? also it's a private cluster
I am trying to allow users to dynamically add domains to my cluster. Do you know of a way to support this ?
Круто, очень круто! Огромное спасибо из России!
so can anyone help my situation
I've got an 'ens160' interface which the kube host machines ipv4 are set and reachable from outside network.
and a kube-ipvs0 interface that is created by kubernetes and internal ip addresses gets assigned to nodes.
so I've delpoyed nginx ingress controller
and when i deploy an ingress instead of assigning ip from ens160 interface for the ingress so it'll be reachable from ouside and routed from internet. kube would assign ip from kube-ipvs0 range and i cannot access from anywhere but within the node shell. :(
sick mate. just sick... XD
does anyone know how to Pass client IP from my local computer to remote Minikube using Ingress ?
You have paste your domain but this is not working with me on domain to access on external world
I tried multiple time, never got it to work! despite great video
I set your content apart. There is no equal. Thank you.
Is their any way (probably some annotation) we can pass the capture group 1 i.e. $1 to the upstream
Capture group 1 in his example was just a slash or the end of the string "(/|$)"
Hidden Gem
I can do it like in the video. But let's say I'm deploying Prometheus and Grafana. So, create a Pod for these. I am using a Cluster IP type server. Afterwards, I configure these with ingress.yaml. Normally, when I type the PublicIp/prometheus path in the browser, it should appear. But it's not working. Is there an example video of this? I don't understand where I'm making a mistake.
Even i am facing this issue
What's the reason for using two separate YAML files in routing-by-path-rewrite.yaml? I think you should just able able to add both paths too the one:
...
- path: /path-a(/|$)(.*)
....
- path: /path-b(/|$)(.*)
....
....
will this scenario works? let me know @anyone
I am installing nginx-ingress controller on namespace "nginx-ingress" and my deployments and svc is running on "default" namespace.
ok, in the example shown in video, This is the case and it's working.
Hi bro, I have created AKS cluster without any loadbalancer when I have installed Ingress-nginx-controller my external IP is in pending state.If i provision app gateway L7 balancer whether Ingress-nginx-controller get external-Ip.please help me to resolve this issue.
You can `kubectl describe` the service and check for any events. If you are able to get control plane logs, the cloud controller manager logs will reveal the reason. There could be few possible reasons with the common one being the service principal or managed Identity may not have enough permissions to interact with the azure LB. That's usually the main culprit, but it's a guess, best to check the cloud controller logs
In the events it showing " ensuring load balancer age 3m48s(*237over 19h) "
I have connected with Microsoft support team,they are saying standard load balancer is not provisioned along Aks cluster but we need app gateway instead of standard load balancer.I am bit confused can you give some overview how to provision aks cluster with app gateway.Please help I am stuck with from couple of weeks
Whether I need to have service as loadbalancer?
Best would be to provision your cluster with a standard load balancer. All services type LoadBalancer will use this and you will get public IP working for the ingress controller service.
The provider used to create it automatically, but looks like AKS now needs to be provisioned with it
`az aks create` with the `--load-balancer-sku standard` flag
Unable to listen on port 443: Listeners failed to create with the following errors: [unable to create listener: Error listen tcp4 127.0.0.1:443: bind: permission denied unable to create listener: Error listen tcp6 [::1]:443: bind: permission denied]
error: unable to listen on any of the requested ports: [{443 443}]
Hey I'm getting this error while port forwarding?
How to resolve this?
try binding to 0.0.0.0: kubectl -n ingress-nginx port-forward --address 0.0.0.0 svc/ingress-nginx-controller 443
Plz create video for building custom docker image using alpine bass image..Apache, php, MySQL
Plz share docker file link here.. I have emergency requirement...
That is a bad idea, why would you create a database and web server in the same image?
Why is the audio sooooo bad?!
Sloooowly demystifying Kubernetes one video at a time...
You are not explaining application how to access application access for external world.not about external ip if ingress nginx