Questions tagged [ingress]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
18 views

Data Ingress to S3 from an FTP Server

I have about 1.5TB of data on an FTP server from my web hosting provider that I want to migrate into S3. From what I have read there are a number of ways to do this, including FileZilla Pro which ...
0
votes
1answer
60 views

Nginx Ingress-Controller Load Balancing

I was wondering how does the ingress controller make sure that the incoming requests for the K8S cluster is load-balanced between all the K8S nodes. I know that with some other ingress controllers ...
0
votes
2answers
145 views

GCP - GKE Setup: Error during load balancer auto generation

I have a GCP Internal private IP GKE cluster that has multiple services that we support. I am attempting to setup an ingress to support these multiple services over TLS. This is based on the following ...
0
votes
1answer
53 views

Ingress not forcing/preventing https connections on GKE

I'm setting up ingress on GKE and facing an issue (even after following all the tutorials) All I want is to disable http access. The following is the output of kubectl describe ingress: Name: ...
0
votes
0answers
33 views

Migrating an external Kubernetes service from load balancer to ingress controller

So currently i have 2 services in a namespace called "development" that need to handle external traffic, and currently use type:LoadBalancer, and have their own external IPs and DNS records. ...
1
vote
1answer
122 views

How to change the default certificate chain in Kubernetes Ingress

I'm using AKS on Azure and Ingress with Let's Encrypt certificate (configured by https://docs.microsoft.com/en-us/azure/aks/ingress-static-ip) The certificate chain defaults to DST Root CA X3 but I ...
1
vote
1answer
277 views

MySQL on Kubernetes with Traefik v2

I'm trying to deploy MySQL on my Kubernetes cluster. I have Traefik v2 ingress controller and I'm using IngressRouteTCP CRD. Here is my Deployment: apiVersion: apps/v1 kind: Deployment metadata: ...
0
votes
1answer
122 views

Configuring Kubernetes Ingress

I'm trying to configure Google Kubernetes Engine Ingress properly to a load balanced Docker application which runs on port 3000. I'm clearly making an obvious mistake somewhere, but I have no idea ...
0
votes
1answer
1k views

ingress nginx upstream sent no valid HTTP/1.0 header while reading response header from upstream

I'm trying to setup an nginx ingress controller for services in my namespace. One of the backend services accept HTTP traffic on port 80, the other accepts only HTTPS traffic on port 443. See the ...
0
votes
1answer
180 views

NSX/NCP Ingress to secure (HTTPS/TLS) backend

I'm using NSX/NCP Ingress in a dedicated VMWare PKS cluster. I am attempting to stand up ingress to Elasticsearch and the backend service uses HTTPS. I can not seem to find a way to have NSX Ingress ...
0
votes
1answer
138 views

istio service mesh for east-west traffic management in kubernetes cluster

I am having the confusion regarding the some of use-case in our environment. First one is we will be having api gateway of our own for north/south traffic which our api gateway will be listening to ...
0
votes
0answers
22 views

How to handle regrex in pathprefix for traefik 2

apiVersion: traefik.containo.us/v1alpha1 kind: Middleware metadata: name: middleware-stripprefix-test namespace: test spec: stripPrefix: prefixes: - user/api-resources - user/...
0
votes
1answer
32 views

Kubernetes - Ingress vs Nginx with Loadbalancer

AFAIK an Ingress is just an abstraction layer to a LoadBalancer service targeting Nginx (or others) Are there features only an ingress can provide? Are there any drawbacks of using LoadBalancer + ...
2
votes
1answer
160 views

Can't delete dangling k8s load balancer due to http target proxy that doesn't exist

I'm trying to delete the forwarding rule, target proxy, url map and backend services that belong to an extinct k8s ingress. I successfully delete the forwarding rule and target proxy but then when I ...
0
votes
1answer
98 views

how to generate v4UUID from my nginx ingress

I have been looking at options to generate a v4 UUID from my nginx ingress implementation with the use of some annotations or any other way it would be possible to achieve this. I could not find any ...
0
votes
0answers
35 views

GKE: Switch from TCP to Ingress Load Balancer in prod

We have several deployments running in Google Kubernetes. Most of them are web services set up with the default configuration, so they have a public IPv4 address which is served by a TCP load balancer....
0
votes
1answer
477 views

cert-manager nginx-ingress SSL connection error

i successfully installed cert-manager and nginx-ingress in my kubernetes cluster. Ingress is working as expected and was tested. Certificate creation via cert-manager is also working. I created a ...
0
votes
1answer
1k views

How to configure client_max_body_size per a location using nginx controller

I would need to configure client_max_body_size for a specific location in my Ingress configuration file then is the default value. How it is possible to do it? I was looking into the doc but have not ...
0
votes
1answer
990 views

Traefik is getting “404 Page not found” in AWS

I installed my Traefik with default files from: https://docs.traefik.io/routing/providers/kubernetes-crd/#configuration-examples My ingressroute is looking like that: apiVersion: traefik.containo.us/...
1
vote
1answer
456 views

Cloudfront infront of ELB and kubernetes is showing Default backend (nginx-ingress)

Having kubernetes cluster with nginx ingress, pointed to AWS ELB load balancer and Route 53 domain pointed to this ELB is working just fine. Now I am trying to add cloudfront, it's pointing to load ...
0
votes
0answers
145 views

Apache ProxyPass returns 400 Bad Request with HTTPS

I have an Apache server in front of a web application server (AEM) that proxies requests to another application server (Magento). When I'm using this on localhost with HTTP everything is fine, but ...
1
vote
1answer
2k views

Kubernetes not regenerating SSL Certificate

I have tried and tried many different things, and I'm unable to land into a solution. The certificate was issued once using letsencrypt, but was never refreshed. Could you people give me a hint on ...
1
vote
2answers
576 views

GCP Kubernetes engine - crash of nginx-ingress-controller after large file upload

I'm trying luck here to solve my problem happening on Google Cloud Kubernetes Engine. Problem in short: When I upload file via my PHP application of 15-20MB, nginx ingress controller crashes, disk IO ...
1
vote
0answers
945 views

Axios in a Node.js container on Kubernetes is returning “ECONNREFUSED 127.0.0.1:30561”?

Full error message: connect ECONNREFUSED 127.0.0.1:30561 at TCPConnectWrap.afterConnect The axios request is running in a Node.js environment (Next.js), which is where the error occurs, strangely the ...
0
votes
0answers
375 views

AKS IP forwarding from Nginx pod to Ingress controller not working

We have a SaaS application that is running perfectly well on Azure IaaS inside VMs. Our frontend is hosted on Nginx and we have many location based rules that forward/proxy the traffic to our backend ...
0
votes
1answer
3k views

ERR_SSL_PROTOCOL_ERROR on otherwise working kubernetes ingress/service

I have a basic nginx deployment and an existing certificate issued by let's encrypt via cert-manager. I thought everything was in place to start using the certificate but I'm unable to connect on ...
3
votes
1answer
871 views

Running MQTT broker in Kubernetes (nginx-ingress-controller) with TCP over SSL

I'm currently trying to setup a MQTT broker (VerneMQ) on my kubernetes cluster (GKE). At the moment I'm using nginx-ingress-controller with a Google provided L4 load balancer. The VerneMQ deployment ...
0
votes
1answer
552 views

kube-proxy not accepting connections on some nodes

I'm running into a really weird situation where kube-proxy doesn't accept connections on a some nodes and I'm frankly I'm stumped. Background: kubernetes cluster is setup on AWS EC2 using kops the ...
1
vote
1answer
276 views

GCP load-balancer ssl certificate resets itself after change

So I need to change an expired SSL certificate. Unfortunately, the one responsible for this task has passed away suddenly. I have no experience with google cloud, kuberneted or ingress. If I go to ...
0
votes
1answer
86 views

Managing a single Kubernets Ingress with multiple rules

I'm using Kubernetes Ingress on GCP to route traffic to different HTTP services. TLDR: Is there a way to control a single Ingress object by adding rules to it from multiple different spec files? We ...
1
vote
1answer
254 views

Exposing application which enforces https using ingress

I've been setting up a kubernetes cluster as a PoC, but currently struggle to find a solution for my problem. A proprietary software that I need to deploy does only expose one port which is https. I ...
0
votes
2answers
744 views

Kubernetes: horizontal auto-scaling based on metrics in another namespace

I'd like to set up horizontal auto-scaling for a deployment based on the metrics of the ingress-controller deployed in another namespace. I have a deployment (petclinic) deployed in a certain ...
1
vote
1answer
183 views

GCP - GKE: Every Ingress configuration keeps resetting automatically. How to set an HTTPS health check?

I know that Ingress requires a service in an healthy state in order to serve its contents through HTTP(S) and to do so I configured a ReadinessProbe on my workload deployment: readinessProbe: ...
0
votes
1answer
812 views

How to do / to /index redirection for an application when I am using haproxy ingress rules

I am using HAProxy Ingress Controller and have rules set for /index and /app. I want any traffic on / to be redirected to /index. How can I achieve this? I Have 4 deployments via haproxy, default-...
0
votes
2answers
2k views

How to keep Authentication header with redirect using NGINX ingress annotations

I have an nginx ingress controller for my kubernetes cluster. I have a need to add a permanent redirect to an ingress which I can successfully do with nginx.ingress.kubernetes.io/permanent-redirect: "...
0
votes
1answer
259 views

Kubernetes Ingress Controller & LoadBalancer on AWS

I want to create a single node K8S cluster on AWS and run a simple demo app, exposed to the outside world on port 80. How do I do this? Conceptually I understand that I need a pod which is defined by ...
0
votes
1answer
270 views

GKE load balancing + ingress controlller for dev env

I've got some domain example.com with some subdomains (foo.example.com, bar.example.com, etc). That's hosted in GKE and contains one ingress with the mass of routing. This all used to be deployed ...
0
votes
1answer
217 views

How to return 200 for health checks

Google Cloud GCP Will NOT forward to Ingress that does not pass health checks. Could anyone share how exactly to configure Traefik Ingress to pass health checks? I think it needs to return a 200 on /...
0
votes
0answers
250 views

Ingress root path not redirected to HTTPS despite `ssl-redirect=true`

Setup: Azure AKS with application gateway ingress, annotated with ssl-redirect=true Problem: Root path doesn't get redirected to HTTPS. Here's my ingress.yml: apiVersion: extensions/v1beta1 kind: ...
1
vote
0answers
68 views

Why use ingress to expose a service when you have a LoadBalancer?

I have been researching how Kubernetes exposes services to the outside world and have found lots of articles explaining the differences between using NodePort, LoadBalancer, and Ingress. However ...
1
vote
1answer
855 views

Nginx ingress to support ipv4 and ipv6 for kubernetes IPv4 cluster

I have installed K8S Cluster using 3 VMs (1 Master, 2 Workers). VM1: Eth0: IPv4-A1, Eth1: IPv4-B1, IPv6-C1 VM1: Eth0: IPv4-A2, Eth1: IPv4-B2, IPv6-C2 VM1: Eth0: IPv4-A3, Eth1: IPv4-B3, IPv6-C3 My ...
0
votes
1answer
181 views

Why is an Ingress resource assigned external IPs?

I have a GKE cluster running with the nginx-ingress controller from the Kubernetes community (via Helm). I set it up with a regional IP which I had reserved in advance like so: helm install stable/...
0
votes
1answer
166 views

ModSecurity, expirevar wont work

I've enabled modsecurity in my nginx k8s ingress using this guide, then I've added the following custom rules to block potential brute force attack # Block by ip # Retrieve the username SecAction "...
2
votes
1answer
405 views

Setting up HTTP Load Balancing with Nginx Ingress Controller

Could somebody write up the steps of setting up HTTP Load Balancing with Nginx Ingress Controller for Google Kubernetes Engine? I followed this GKE tutorial for a basic Ingress. It got a Forwarding ...
6
votes
3answers
4k views

Nginx Ingress 504 timeout - EKS with ELB connected to nginx ingress

We are using a NLB in AWS connected to our EKS cluster via a nginx ingress controller. Some of our requests get a random 504 gateway timeout. We think we debugged the problem to our nginx ingress. ...
2
votes
1answer
478 views

Kubernetes Nginx Ingress Controllers log to Stackdriver

I'm using Nginx Ingress Controller on GKE and I want to send its logs to Stackdriver with the following format https://cloud.google.com/logging/docs/reference/v2/rest/v2/LogEntry#HttpRequest. At the ...
0
votes
0answers
3k views

Ingress NGINX client closed connection while SSL handshaking

We have ingress-nginx running for a while and about 10% of requests ending up with some SSL handshake problem. Here is an example of a failing connection: 2019/02/14 10:15:35 [debug] 237#237: *4612 ...
1
vote
0answers
1k views

Rancher 2.0 High Availability and Certificates

I replied to a similar question on the Rancher Forums with no luck: https://forums.rancher.com/t/rancher-2-x-ha-install-and-ssl-termination/12515/3 When following the Rancher Docs for a HA install, a ...
1
vote
2answers
74 views

ingress google compute cloud ip

I'm trying to setup Ingress to serve from a static IP that I have created with gcloud. However it seems that Ingress does not take that configured one but picks a random new one. The name of that IP ...
1
vote
1answer
373 views

GCE NGINX Ingress does not use controller

I've installed nginx ingress using helm on Google Cloud Kubernetes. The service, controller and default backend are up and running and I can perform a GET request on the /healthz endpoint. However, ...