Watch out for faulty ingress definitions

Categories: Kubernetes
Summary Ingress objects can interfere between each other in the cluster. If you deploy incorrect ingress definition (and kubernetes won't detect the error), Nginx Ingress Controller will fall into restart loop and won't accept any new configuration. This will lead to broken deployments from that time onwards. Description I have been trying out how wildcards in Nginx Ingress Controller work. This is required when you want to have an URL prefixed with the application's language or a country.

Read More →

Kubernetes automatic SSL certificate provisioning

Categories: Kubernetes
Summary There is an open source project from JetStack called kube-lego. It allows you to automatically request SSL certificates for your Kubernetes cluster using Let’s Encrypt free service. Working with Let’s Encrypt using Kube-lego is quite straightforward. Nginx Ingress Controller has built-in support for kube-lego. Having RBAC might seem like a complication but in fact it doesn’t add much of a complexity to the solution. Requirements Kubernetes 1.8.0 or higher with Nginx Ingress Controller deployed 30 minutes of spare time Description Let’s Encrypt is a service that provides you with automatic TLS/SSL certificate provisioning for your website.

Read More →