Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Multiple Ingress on GKE

Gavin Zhou
April 21, 2017

Multiple Ingress on GKE

Multiple Ingress traefik & nginx on GKE

Gavin Zhou

April 21, 2017
Tweet

More Decks by Gavin Zhou

Other Decks in Technology

Transcript

  1. Architecture: Orangesys > Kubernetes Apigateway Namespace Cloud Load Balancing Standard

    Devices HTTPS Browser Client Production Namespace Kube-system Namespace Tiller Replication Controller Grafana Container Engine Replication Controller Influxdb Container Engine Replication Controller Corporate Site App Engine Autoscaling Orangesys Firebase Autoscaling Monitoring Namespace Prometheus RC Influxdb RC Grafana RC Opsbot Namespace Kubebot RC K8s-event RC Stripe Server Api Container Engine Replication Controller PostgresSQL Container Engine Replication Controller MariaDb Container Engine Replication Controller Nginx Container Engine Replication Controller Traefik Container Engine Replication Controller Server Telegraf Ingress Container Engine Replication Controller Kong ApiGateway Container Engine Replication Controller Kubenetes API Replication Controller SSL Cert Bot Replication Controller Orange Api Container Engine Replication Controller
  2. Why other ingress?! • Wildcard Host not support • Multi

    TLS not support • Cross-namespace not support • http -> https redirect • GCPLB、20$/m
  3. Topic • TLS secret 名前は tls.crt/tls.key • Ingress http通信禁止できる、redirectできない ◦ ingress.kubernetes.io/ssl-redirect:

    "false" • Kubernetes Certificate Managerを利用すると、letsencrypt証明証設定が簡単 • Helm https://github.com/orangesys