Create a Kubernetes TLS Ingress from scratch in Minikube

Рет қаралды 76,890

6 жыл бұрын

HTTPS and TLS are hard! Wrong! This video will prove you wrong. We'll start with an empty cluster and and end up with a web server ready for HTTPS. How can we do all of that in one video? Thanks to the TLS configuration on Kubernetes' Ingress Resource. If you're not familiar with kubectl's more imperative commands, such as 'run', 'create' or 'expose', you'll also be in for a treat!

Пікірлер: 92

@gmanireland 5 жыл бұрын

great job, no messing straight to the point. keep up the good work. The fast pace is good too.

@mbigras 3 жыл бұрын

The pace of this video was excellent!

@tinge904 5 жыл бұрын

Great tutorial - short and concise!

@ajit555db 5 жыл бұрын

Excellent, code worked flawless and nothing explains better than a working code than pages of documents.

@lbognini 6 жыл бұрын

Great content with clear explanations! You're really doing an awsome job!

@kubucation 6 жыл бұрын

Thank you very much!

@Calm_Energy 4 жыл бұрын

wow that's a loud keyboard! Thanks for the great videos, nice and dense with no fluff, just like I like

@weiyen 3 жыл бұрын

Your videos are one of the best explained videos I have seen. Well done. Looking forward to more

@kubucation 3 жыл бұрын

Thank you. I don’t have a lot of time at the moment, unfortunately, but I’ll always try to record a video here and there. So stay tuned for more.

@mohamed_faris_247 Жыл бұрын

THANK YOU THANK YOU THANK YOU Simple, great, fast, and to the point. Keep up the great work man!

2 жыл бұрын

Awesome thanks , I am looking forward to understand how the whole istio security stack works and your videos have been very useful

@steputube 4 жыл бұрын

Short and sweet! Love it.

@LoveWillTearUsAppart 3 жыл бұрын

Nice! A couple of words. I needed to play again and again because you go too fast, but may be its a very personal appreciation. However, after not having clear what the documentation means in the TLS subject, you helped me. Thanyou!.

@r.h.u.k.a 3 жыл бұрын

Amazing, thanks for this tutorial. Great explanation.

@dasgoll 6 жыл бұрын

I love your videos man.Keep up the good work. Cheers!

@kubucation 6 жыл бұрын

Thanks so much! That’s super motivating!

@trainchen9861 5 жыл бұрын

This is an awesome video for me! Thanks a lot!!!

@hengborchhay6388 3 жыл бұрын

the tutorial is very helping full sir especially about the imperative command to generate the certificate very cool thing!!!

@thespencerowen 5 жыл бұрын

Best TLS videos on the internet!

@hareeshjp 3 жыл бұрын

Clear crystal explanation thank you very much

@faouzichelighem5927 2 жыл бұрын

Awesome!! thank you for this clear explanation.

@bendes666 4 жыл бұрын

Thanks a lot for the clear tutorial !

@sriramdharwadkar5084 3 жыл бұрын

Awesome tutorial! Thanks a lot.

@MrHikokunin 4 жыл бұрын

Thank you man, nice video!

@istvanszabo6875 11 ай бұрын

Well done Sir! 👏

@mvlad7402 3 жыл бұрын

very nice explanation and example

@anilkommalapati6248 2 жыл бұрын

Wowwww this is really incredible. No fuss, no lags, no spins.... No blah blah blah ....STRAIGHT ARROW ONTO TARGET. Crystal clear and this so easy felt like drinking a starbucks coffee.. super man and thank you very much.

@jamallmahmoudi9481 Жыл бұрын

very cool Brief, useful and practical thank you so much 🙏👌

@suibinzhang6782 6 жыл бұрын

Love ur tutorials, succinct, straight to the point. Nice work and keep it up!

@etiennedilocker9729 6 жыл бұрын

thanks for the great feedback. Didn't have a lot of time lately to add new videos, but definitely will add more in the future!

@olva 6 жыл бұрын

Thank you so much for saving my life:), this video really helped me a lot , the funny part this video has only 558 viewers, while my son watching toys hot wheels videos each one has over million views :)

@kubucation 5 жыл бұрын

Only a matter of time until Kubernetes is more popular than toy cars ;)

@ahmedw5 10 ай бұрын

Well, today this video has almost 70 000 views. Not exactly at a million yet but hey, its still a big jump!

@pizza-cat1337 4 жыл бұрын

very useful for learning.. thanks

@Shubham__Saroj Жыл бұрын

Straight to the point.

@Rashmi-yt1zf 9 ай бұрын

awesome content 👌

@bobreselman5731 5 жыл бұрын

Nice video, thanks!

@eXpire163 4 жыл бұрын

Cool, Great job

@TheKutall 5 жыл бұрын

Thank you so much. You really help.. BIG SMILE ::::)

@fernandocambria5764 5 жыл бұрын

Thanks!

@Abhishekkumar-rp8hi 3 жыл бұрын

And it works!

@lindhe 4 жыл бұрын

Just a quick heads-up to anyone following this tutorial line-by-line without thinking: at 4:50 he writes a > while he should have written >>. Having only a single > will overwrite your hosts file, which is pretty undesirable.

@kubucation 4 жыл бұрын

Oh, good catch! Completely agree, don't overwrite your hosts file, append to it instead ;-)

@andrusaren8348 3 жыл бұрын

@@kubucation and, instead of typing "clear" to clear terminal window just hit ctrl+l (small L)

@yssouftoure2326 6 жыл бұрын

good video

@letme4u 4 жыл бұрын

Great !!!

@kubucation 4 жыл бұрын

Thanks!

@edgarlip2 2 жыл бұрын

the in depth style is more needed - since this is a tutorial ... = )

@johnclarkson6120 5 жыл бұрын

so great subscribe

@utiogaga1586 2 жыл бұрын

cool

@GhassenKhalilAti 3 жыл бұрын

Thanks for the tutorial. I'm using Docker Desktop default K8S cluser, so what's the equivalent of the cmd : minikube addons enable ingress ?

@nintros6770 4 жыл бұрын

Very good video. I have added tls to ingress and all external requests are protected. Could you tell how set up tls for internal k8s connection? For example I have auth service that available outhside and inside of k8s.

@unicornsarena4030 4 жыл бұрын

Great explanation. This example shows TLS termination, is it possible to achieve TLS bridging (end to end encryption) with Ingress ?

@parthibanramasamy4701 5 жыл бұрын

Its very nice tutorial! I have question here how can i enable both http and https for the same host?

@TheEbbemonster 2 жыл бұрын

Good video! Next, how do we create a Let's Encrypt certificate?

@sahdevchauhan 5 жыл бұрын

@kubucation - which zsh theme are you using???

@riturajsinha8332 4 жыл бұрын

Hi there great video ...if you get some time can you add something on kong api gateway as well ...

@Fayaz-Rehman 3 жыл бұрын

Thanks for the easy solution - How do we make these keys as trusted tls and use them on internet.

@MrGauravMittal 4 жыл бұрын

Hi, I have a cluster of 2 worker node and a master. Now when I create an entry of example.com in the /etc/hosts, which IP should I populate in that. Is it of worker-1 or worker-2 or K8s Master

@tillus7101 2 жыл бұрын

would be great if you could update this: `error: unable to recognize "base-notebook/ingress.yml": no matches for kind "Ingress" in version "extensions/v1beta1"`

@WilliamCodewizard 5 жыл бұрын

Nice, how can I put that bar with green cartel?

@sarfarazshaikh 4 жыл бұрын

Can we generate live ssl certficate and put it in ingress ? Will it work?

@khai-chuongtrinh1429 3 жыл бұрын

hi thanks for posting this video. i tried following and got everything working up to the point where you access the web server thru the browser. I am getting ```uses an invalid security certificate. The certificate is not trusted because it is self-signed. Error code: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT```. When I curl it using those -k and --cacert flags it works fine, I can see the HTML content. What am I doing wrong?

@VinuezaDario 4 жыл бұрын

Hi, Failed connect to tls.nginx.example.com:443; Connection refused?

@rafaelclaumannbernardes2366 10 ай бұрын

can i use this certificate validation without Ingress host rule? just using http and paths.

@dasgoll 6 жыл бұрын

At 10:26 what did you do to open the editor to edit the command?

@kubucation 6 жыл бұрын

Ctrl X + Ctrl E. Works in any bash-like shell and opens whatever you have configured in $EDITOR, I believe.

@Prizmo21 5 жыл бұрын

@kubucation how can you remove what you appended in the /etc/hosts file?

@DanMackAlpha 3 жыл бұрын

just edit /etc/hosts and remove the line when you are done. Probably need 'sudo vi /etc/hosts' if you are not root.

@DanMackAlpha 3 жыл бұрын

so the ingress.yaml still specifies port 80 after switching to tls version?

@jaysistar2711 3 жыл бұрын

Yes, the Ingress controller decrypts https to http, so you would tall to your internal services in cleartext http. The way that is ussualy said is "The Ingress Controller does TLS termination." If you really want TLS between your services, then you can use a service mesh like LinkerD or Istio, but even then, it looks to your application as if you're speaking plain text.

@sasyachowdary3144 3 жыл бұрын

@@jaysistar2711 Any example how we can enable TLS all the way from client to the service?

@jaysistar2711 3 жыл бұрын

@@sasyachowdary3144 As I said in the previous comment, LinkerD and Istio do TLS all the way to the pod. Within the pod, a sidecar container running an layer 7 proxy (fancy way of saying "understands application protocols like your database and http, etc.") is given all network traffic, and it encrypts and decrypts all traffic entering and leaving the pod. That's called mTLS or "mutual TLS". Installing LinkerD or Istio is easy, but not something that can fit in a comment here. Also, something important to note, in the case of Istio you would use a Gateway and VirtualService instead of an Ingress object.

@sasyachowdary3144 3 жыл бұрын

@@jaysistar2711 thanks for the reply. Let me check them out.

@aishwarya921 Жыл бұрын

This will only run on my local, right? How can I make it publicly accessible? I want my load balancer service to be accessed publicly with https. I have my application running on kubernetes

@jeanandrewfuentes2995 5 жыл бұрын

Hi! i tried following the instructions but i don't think my ingress is communicating with my service. I'm doing it in a kubernetes cluster 1 master and 1 worker node. Do i have to install anything like what you did for the minikube for the real cluster? im using kubeadm, and flannel for networking Name: nginx Namespace: default Address: Default backend: default-http-backend:80 () Rules: Host Path Backends ---- ---- -------- ghost.whitecloak.io / nginx:80 () Annotations: kubectl.kubernetes.io/last-applied-configuration: {"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"annotations":{"kubernetes.io/ingress.class":"nginx"},"name":"nginx","namespace":"default"},"spec":{"rules":[{"host":"ghost.whitecloak.io","http":{"paths":[{"backend":{"serviceName":"nginx","servicePort":80},"path":"/"}]}}]}} kubernetes.io/ingress.class: nginx --- NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE nginx ClusterIP 10.111.219.92 80/TCP 55m

@devb02 2 жыл бұрын

Which version of ingress is this :O

@3paszczak 5 жыл бұрын

Hi, I've created ingress but when I type "kubectl get ing" I can't see adress ip of my ingress. What shall I do? Is there option to use ingress without adress ip?

@kubucation 5 жыл бұрын

This depends on the type of cluster you are using. On GKE for example you automatically get external loadbalancers on your ingresses, that's the IP shown. If you're running on minikube or a custom on-premise cluster for example, you might not get those.

@3paszczak 5 жыл бұрын

Yes, I use minikube. When I created nginx I got ip, but when I use other image I don't get IP.

@naim2083 2 жыл бұрын

Can you Make a vidéo for trusted certificat

@fredteixeira3604 4 жыл бұрын

this echo "$(minikube ip) ..., do you really do that in your real life?

@satyapallekonda8017 2 жыл бұрын

hii ,The video is great but i am getting version error

@inzheneher 3 жыл бұрын

At k8s 1.20 it doesn't work. It is impossible to create Ingress.

@jaysistar2711 3 жыл бұрын

I got nervous when he had the single ">" after he said "append". I don't know how to yell ">>", but I'm pretty sure that I was.

@OlivierBerger 4 жыл бұрын

Too bad the commands you typed aren't available in the description of the video. Other than that it shouldn't be hard to replicate

@OlivierBerger 4 жыл бұрын

Oh, and btw, I just found that post that contains many of the commands, plus a few interesting bits : vocon-it.com/2018/12/31/kubernetes-6-https-applications-via-ingress-controller-on-minikube/

@Hujino26 4 жыл бұрын

how do you make this shortcut? kzfaq.info/get/bejne/bbFgmqSK0r27mKM.html

@vanphan8499 2 жыл бұрын

Great video and explanation. Any chance you have an updated one with "networking.k8s.io/v1 Ingress" since extensions/v1beta1 Ingress is deprecated in v1.14+, unavailable in v1.22+