How to debug Kubernetes Ingress? (TLS - Cert-Manager - HTTP-01 & DNS-01 Challenges)

Поділитися
Вставка

КОМЕНТАРІ • 36

  • @AntonPutra
    @AntonPutra  7 місяців тому +2

    🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com

  • @rutgerpronk2754
    @rutgerpronk2754 Місяць тому +1

    Love how you explain everything so clearly! I've never known how the challenges exactly worked when integrating them with traffic foe another project.

  • @Antonio-yy2ec
    @Antonio-yy2ec 7 місяців тому +3

    Pure gold! Thank you, Anton. Keep going.

  • @jonhwicked6839
    @jonhwicked6839 4 місяці тому +1

    This is best !! Please keep teaching!!

  • @ailsontavares4564
    @ailsontavares4564 4 місяці тому +1

    Thanks so much for this tutorial. Keep going!!

  • @MagDag_
    @MagDag_ 7 місяців тому +1

    Спасибо. Привет из Флориды

  • @arozendojr
    @arozendojr 7 місяців тому +2

    Your content is helping me a lot, thank you very much

    • @AntonPutra
      @AntonPutra  7 місяців тому +1

      Welcome! This one is more niche-specific, but I think a lot of people using Nginx Ingress will find it useful.

    • @richinex
      @richinex 7 місяців тому +1

      Hi @AntonPutra, how do I get access to the files/resources. I have just subscribed to your videos

    • @AntonPutra
      @AntonPutra  7 місяців тому

      @@richinex I have a link under each video - github.com/antonputra/tutorials/tree/main/lessons/194

    • @richinex
      @richinex 7 місяців тому +1

      @@AntonPutra True I found it. Thanks

  • @soufiane22v
    @soufiane22v 7 місяців тому +2

    Amazing stuff , which tool do you use to create those extraordinary diagrams ?

    • @AntonPutra
      @AntonPutra  7 місяців тому +1

      thanks! i use adobe suite

    • @soufiane22v
      @soufiane22v 7 місяців тому

      @@AntonPutra thanx a lot for the quality 🙏🏻🙏🏻🙏🏻. Do have any plan to create some paid courses on udemy or on your own platform ?

    • @AntonPutra
      @AntonPutra  7 місяців тому +2

      @@soufiane22v thanks, maybe in the future

  • @gabecerts4286
    @gabecerts4286 6 місяців тому +1

    Awesome, Thanks, the best

  • @fio_mak
    @fio_mak 4 місяці тому +1

    Can you throw some more light on openid connect provider?
    Can I use same with GoDaddy DNS?

    • @AntonPutra
      @AntonPutra  4 місяці тому +1

      Take a look at external-dns. It watches for ingress hostnames and automatically creates DNS records. GoDaddy is also supported - github.com/kubernetes-sigs/external-dns

  • @ganeshpawar231
    @ganeshpawar231 Місяць тому

    Will it work if we provide temp domain by editing /etc/hosts in local cluster??

  • @minhnhatcao259
    @minhnhatcao259 4 місяці тому

    Thanks! Do I need to create kind Certificate when already install helm cert-manager?

    • @AntonPutra
      @AntonPutra  4 місяці тому

      you have 2 options. 1. just use annotation on the ingress and "Certificate" will be created automatically. 2. Instead of annotation you can manually create "Certificate" which will generate private key and obtain public cert from letsencrypt.
      first option is prefered but it's up to you

  • @tdslot
    @tdslot 7 місяців тому

    Very good video, but if I have k8s on premises behind firewall and not using AWS Route53 DNS service? I use other that not in CertManager provider list. What about this case?

    • @AntonPutra
      @AntonPutra  7 місяців тому

      Thanks!. Just use cert-manager with http-01, it only requires you to open port 80 and no additional integrations.

    • @tdslot
      @tdslot 6 місяців тому

      @@AntonPutra Hello, if I understood correctly then my all internal host names that exist on ingress will be exposed to public internet?

    • @AntonPutra
      @AntonPutra  6 місяців тому

      @@tdslot ​​⁠No, you can’t use public CA to issue certificates for your private domains, unless of course you own public domain as well. But in that case you would face dns double horizon issues. If you only need to protect your internal domains, you need to use self sign ca.

  • @ailsontavares4564
    @ailsontavares4564 Місяць тому

    There is a way to use a certificate from AWS Certificate Manager in terraform with auto update for k8s ?

    • @AntonPutra
      @AntonPutra  Місяць тому

      Yes, you can. I had an example somewhere in my repo, but I don't remember where.

  • @neelojp8460
    @neelojp8460 6 місяців тому

    Thank you so much @anton, amazing stuff and how you explain it 😮😮…
    It’s possible to get you .bashrc custom configuration :-)) thanks

    • @AntonPutra
      @AntonPutra  6 місяців тому +1

      thanks, well it's zshell - ohmyz.sh/

    • @neelojp8460
      @neelojp8460 6 місяців тому

      @@AntonPutra thank you ;-))