How to debug Kubernetes Ingress? (TLS - Cert-Manager - HTTP-01 & DNS-01 Challenges)

Поделиться
HTML-код
  • Опубликовано: 9 янв 2025

Комментарии • 39

  • @AntonPutra
    @AntonPutra  8 месяцев назад +2

    🔴 To support my channel, I'd like to offer Mentorship/On-the-Job Support/Consulting (me@antonputra.com)

  • @AntonPutra
    @AntonPutra  Месяц назад

    🍿 Benchmarks: ruclips.net/p/PLiMWaCMwGJXmcDLvMQeORJ-j_jayKaLVn&si=p-UOaVM_6_SFx52H

  • @rutgerpronk2754
    @rutgerpronk2754 2 месяца назад +1

    Love how you explain everything so clearly! I've never known how the challenges exactly worked when integrating them with traffic foe another project.

  • @Antonio-yy2ec
    @Antonio-yy2ec 8 месяцев назад +3

    Pure gold! Thank you, Anton. Keep going.

  • @jonhwicked6839
    @jonhwicked6839 6 месяцев назад +1

    This is best !! Please keep teaching!!

  • @ailsontavares4564
    @ailsontavares4564 5 месяцев назад +1

    Thanks so much for this tutorial. Keep going!!

  • @arozendojr
    @arozendojr 8 месяцев назад +2

    Your content is helping me a lot, thank you very much

    • @AntonPutra
      @AntonPutra  8 месяцев назад +1

      Welcome! This one is more niche-specific, but I think a lot of people using Nginx Ingress will find it useful.

    • @richinex
      @richinex 8 месяцев назад +1

      Hi @AntonPutra, how do I get access to the files/resources. I have just subscribed to your videos

    • @AntonPutra
      @AntonPutra  8 месяцев назад

      @@richinex I have a link under each video - github.com/antonputra/tutorials/tree/main/lessons/194

    • @richinex
      @richinex 8 месяцев назад +1

      @@AntonPutra True I found it. Thanks

  • @mvp27-e2g
    @mvp27-e2g 21 день назад

    Hi
    Your videos are easy to understand and gives basic thinking on how it works. I have an issue with Nginx Ingress.
    I have setup my application traffic with Ingress. When i hit the URL for first couple of times its not opening webpage. But when i hit 6 or 7th time its opening the webpage. Any idea what could be the issue? TLS section everything looks correct.

  • @ganeshpawar231
    @ganeshpawar231 Месяц назад

    I am getting an error when i run kubectl describe certificaterequest is failed to wait for order resources to become ready: order is in invalid state.
    I am using godaddy for domain.
    I googled it but didn't get solution.
    What could be the problem?

  • @fio_mak
    @fio_mak 5 месяцев назад +1

    Can you throw some more light on openid connect provider?
    Can I use same with GoDaddy DNS?

    • @AntonPutra
      @AntonPutra  5 месяцев назад +1

      Take a look at external-dns. It watches for ingress hostnames and automatically creates DNS records. GoDaddy is also supported - github.com/kubernetes-sigs/external-dns

  • @ganeshpawar231
    @ganeshpawar231 2 месяца назад

    Will it work if we provide temp domain by editing /etc/hosts in local cluster??

  • @MagDag_
    @MagDag_ 8 месяцев назад +1

    Спасибо. Привет из Флориды

  • @soufiane22v
    @soufiane22v 8 месяцев назад +2

    Amazing stuff , which tool do you use to create those extraordinary diagrams ?

    • @AntonPutra
      @AntonPutra  8 месяцев назад +1

      thanks! i use adobe suite

    • @soufiane22v
      @soufiane22v 8 месяцев назад

      @@AntonPutra thanx a lot for the quality 🙏🏻🙏🏻🙏🏻. Do have any plan to create some paid courses on udemy or on your own platform ?

    • @AntonPutra
      @AntonPutra  8 месяцев назад +2

      @@soufiane22v thanks, maybe in the future

  • @minhnhatcao259
    @minhnhatcao259 6 месяцев назад

    Thanks! Do I need to create kind Certificate when already install helm cert-manager?

    • @AntonPutra
      @AntonPutra  6 месяцев назад

      you have 2 options. 1. just use annotation on the ingress and "Certificate" will be created automatically. 2. Instead of annotation you can manually create "Certificate" which will generate private key and obtain public cert from letsencrypt.
      first option is prefered but it's up to you

  • @ailsontavares4564
    @ailsontavares4564 2 месяца назад

    There is a way to use a certificate from AWS Certificate Manager in terraform with auto update for k8s ?

    • @AntonPutra
      @AntonPutra  2 месяца назад

      Yes, you can. I had an example somewhere in my repo, but I don't remember where.

  • @gabecerts4286
    @gabecerts4286 8 месяцев назад +1

    Awesome, Thanks, the best

  • @tdslot
    @tdslot 8 месяцев назад

    Very good video, but if I have k8s on premises behind firewall and not using AWS Route53 DNS service? I use other that not in CertManager provider list. What about this case?

    • @AntonPutra
      @AntonPutra  8 месяцев назад

      Thanks!. Just use cert-manager with http-01, it only requires you to open port 80 and no additional integrations.

    • @tdslot
      @tdslot 8 месяцев назад

      @@AntonPutra Hello, if I understood correctly then my all internal host names that exist on ingress will be exposed to public internet?

    • @AntonPutra
      @AntonPutra  8 месяцев назад

      @@tdslot ​​⁠No, you can’t use public CA to issue certificates for your private domains, unless of course you own public domain as well. But in that case you would face dns double horizon issues. If you only need to protect your internal domains, you need to use self sign ca.

  • @neelojp8460
    @neelojp8460 8 месяцев назад

    Thank you so much @anton, amazing stuff and how you explain it 😮😮…
    It’s possible to get you .bashrc custom configuration :-)) thanks

    • @AntonPutra
      @AntonPutra  8 месяцев назад +1

      thanks, well it's zshell - ohmyz.sh/

    • @neelojp8460
      @neelojp8460 8 месяцев назад

      @@AntonPutra thank you ;-))