How to debug Kubernetes Ingress? (TLS - Cert-Manager - HTTP-01 & DNS-01 Challenges)

Поділитися
Вставка
  • Опубліковано 14 чер 2024
  • 🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com
    ▬▬▬▬▬ Experience & Location 💼 ▬▬▬▬▬
    ► I’m a Senior Software Engineer at Juniper Networks (12+ years of experience)
    ► Located in San Francisco Bay Area, CA (US citizen)
    ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
    ► LinkedIn: / anton-putra
    ► Twitter/X: / antonvputra
    ► GitHub: github.com/antonputra
    ► Email: me@antonputra.com
    ▬▬▬▬▬▬ Related videos 👨‍🏫 ▬▬▬▬▬▬
    👉 [Playlist] Kubernetes Tutorials: • Kubernetes Tutorials
    👉 [Playlist] Terraform Tutorials: • Terraform Tutorials fo...
    👉 [Playlist] Network Tutorials: • Network Tutorials
    👉 [Playlist] Apache Kafka Tutorials: • Apache Kafka Tutorials
    👉 [Playlist] Performance Benchmarks: • Performance Benchmarks
    👉 [Playlist] Database Tutorials: • Database Tutorials
    ▬▬▬▬▬▬▬ Timestamps ⏰ ▬▬▬▬▬▬▬
    0:00 Intro
    0:47 How to Secure a Website with TLS?
    2:22 HTTP-01 Challenge
    2:58 DNS-01 Challenge
    3:37 Cert-Manager Kubernetes Ingress Workflow
    5:30 HTTP-01 Challenge Demo
    12:12 DNS-01 Challenge Demo
    ▬▬▬▬▬▬▬ Source Code 📚 ▬▬▬▬▬▬▬
    ► GitHub: github.com/antonputra/tutoria...
    #Kubernetes #K8s #DevOps
  • Наука та технологія

КОМЕНТАРІ • 24

  • @AntonPutra
    @AntonPutra  Місяць тому +2

    🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com

  • @Antonio-yy2ec
    @Antonio-yy2ec Місяць тому +3

    Pure gold! Thank you, Anton. Keep going.

  • @gabecerts4286
    @gabecerts4286 Місяць тому +1

    Awesome, Thanks, the best

  • @arozendojr
    @arozendojr Місяць тому +2

    Your content is helping me a lot, thank you very much

    • @AntonPutra
      @AntonPutra  Місяць тому +1

      Welcome! This one is more niche-specific, but I think a lot of people using Nginx Ingress will find it useful.

    • @richinex
      @richinex Місяць тому +1

      Hi @AntonPutra, how do I get access to the files/resources. I have just subscribed to your videos

    • @AntonPutra
      @AntonPutra  Місяць тому

      @@richinex I have a link under each video - github.com/antonputra/tutorials/tree/main/lessons/194

    • @richinex
      @richinex Місяць тому +1

      @@AntonPutra True I found it. Thanks

  • @MagDag_
    @MagDag_ Місяць тому +1

    Спасибо. Привет из Флориды

  • @soufiane22v
    @soufiane22v Місяць тому +2

    Amazing stuff , which tool do you use to create those extraordinary diagrams ?

    • @AntonPutra
      @AntonPutra  Місяць тому +1

      thanks! i use adobe suite

    • @soufiane22v
      @soufiane22v Місяць тому

      @@AntonPutra thanx a lot for the quality 🙏🏻🙏🏻🙏🏻. Do have any plan to create some paid courses on udemy or on your own platform ?

    • @AntonPutra
      @AntonPutra  Місяць тому +2

      @@soufiane22v thanks, maybe in the future

  • @tdslot
    @tdslot Місяць тому

    Very good video, but if I have k8s on premises behind firewall and not using AWS Route53 DNS service? I use other that not in CertManager provider list. What about this case?

    • @AntonPutra
      @AntonPutra  Місяць тому

      Thanks!. Just use cert-manager with http-01, it only requires you to open port 80 and no additional integrations.

    • @tdslot
      @tdslot Місяць тому

      @@AntonPutra Hello, if I understood correctly then my all internal host names that exist on ingress will be exposed to public internet?

    • @AntonPutra
      @AntonPutra  Місяць тому

      @@tdslot ​​⁠No, you can’t use public CA to issue certificates for your private domains, unless of course you own public domain as well. But in that case you would face dns double horizon issues. If you only need to protect your internal domains, you need to use self sign ca.

  • @neelojp8460
    @neelojp8460 Місяць тому

    Thank you so much @anton, amazing stuff and how you explain it 😮😮…
    It’s possible to get you .bashrc custom configuration :-)) thanks

    • @AntonPutra
      @AntonPutra  Місяць тому +1

      thanks, well it's zshell - ohmyz.sh/

    • @neelojp8460
      @neelojp8460 Місяць тому

      @@AntonPutra thank you ;-))