Slide 1
Slide 1 text
Multiple Ingress on GKE
Orangesys Inc.
Slide 2
Slide 2 text
$Who am I
Orangesys Inc.
Tachibana Shuji
Twitter @gavinzhm
https://github.com/orangesys
Running
Slide 3
Slide 3 text
Orangesys Inc.
SaaS監視システム
@orangesysio
https://orangesys.io
Slide 4
Slide 4 text
No content
Slide 5
Slide 5 text
No content
Slide 6
Slide 6 text
Orangesys
● Kubernetes on
GKE
● OpsDev -> NoOps
Architecture
Slide 7
Slide 7 text
Architecture: Orangesys > Kubernetes
Apigateway Namespace
Cloud Load
Balancing
Standard
Devices
HTTPS
Browser
Client
Production Namespace
Kube-system Namespace
Tiller
Replication
Controller
Grafana
Container Engine
Replication Controller
Influxdb
Container Engine
Replication Controller
Corporate Site
App Engine
Autoscaling
Orangesys
Firebase
Autoscaling
Monitoring Namespace
Prometheus
RC
Influxdb
RC
Grafana
RC
Opsbot Namespace
Kubebot
RC
K8s-event
RC
Stripe Server Api
Container Engine
Replication Controller
PostgresSQL
Container Engine
Replication Controller
MariaDb
Container Engine
Replication Controller
Nginx
Container Engine
Replication Controller
Traefik
Container Engine
Replication Controller
Server
Telegraf
Ingress
Container Engine
Replication Controller
Kong ApiGateway
Container Engine
Replication Controller
Kubenetes API
Replication
Controller
SSL Cert Bot
Replication
Controller
Orange Api
Container Engine
Replication Controller
Slide 8
Slide 8 text
Technology Stack
Slide 9
Slide 9 text
Agenda
● Traefik ingress
● Nginx ingress
Slide 10
Slide 10 text
Why other ingress?!
● Wildcard Host not support
● Multi TLS not support
● Cross-namespace not support
● http -> https redirect
● GCPLB、20＄/m
Slide 11
Slide 11 text
Traefik ingress
設定簡単、監視
Dashboardがある
Slide 12
Slide 12 text
Nginx ingress
● Basic Auth support
● Rewrite support
● Redirect support
Slide 13
Slide 13 text
Topic
● TLS secret 名前は tls.crt/tls.key
● Ingress http通信禁止できる、redirectできない
○ ingress.kubernetes.io/ssl-redirect: "false"
● Kubernetes Certificate Managerを利用すると、letsencrypt証明証設定が簡単
● Helm
https://github.com/orangesys