All geek questions in one place

Kubernetes, GCE, load balancing, SSL

I'm a little new to networking, SSL, and NGINX, so it doesn't matter if I miss something obvious. Preface to this Im working on GCE and Kuberenetes. My goal is simply to expose all microservices in my cluster via SSL. Ideally, it will work the same way as when deployed using type = 'LoadBalancer and get one external IP address. This is my goal, but SSL is not available with these basic balancers.

In my research, the best solution would be to install an nginx login controller, use incoming resources and services to expose my microservices. Below is a diagram in which I understood my understanding of this process.

enter image description here

Ive , HTTP. nginx : https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx. . , :/.

, .

, , HTTP. HTTPS . , - https, . 443 , , , , , .

Kubernetes: Ingress http-. , , HTTP. , SSL?

, , , , . , kubectl , - ...

. !

+4
2

, # 2 , , Google HTTP (S) LoadBalancer, , , kubernetes.io/ingress.class: "nginx", : https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx#running-multiple-ingress-controllers.

GKE , , nginx. .

kubernetes docs , NodePort - , Node , . , . type , , ClusterIP.

SSL, . , , nginx controller docs, , tls.cert tls.key.

nginx - , pod kubectl get pods, : kubectl logs nginx-pod-<some-random-hash> -f. , -, , . , Services/Deployments.

DNS- , IP- LoadBalancer, ping cURL -H , , 404 .

+4

, ... : n00b, .

№ 2, , , :

  • , nginx
  • LoadBalancer IP-, .
  • , nginx.
  • , nginx SSL

, , http vs https nginx. http, nginx SSL , SSL , , , HTTP. http, LoadBalancer SSL.

, n00b. . , , .

, . , ( , ). (/ ) , , nginx. ( ), .

, , . , , - , :

https://daemonza.imtqy.com/2017/02/13/kubernetes-nginx-ingress-controller/

, , , ( LoadBalancer IP-), SSL. " ".

Kubernetes , , , . : , ( ), nginx, SSL.

, - .

+1

Source: https://habr.com/ru/post/1665537/

More articles:


All Articles