Ingress Demo: Step-by-Step Guide to Creating and Deploying Ingress Resources with SSL Certificate
Hello folks, Welcome to DevOps Pro!
In this video, we will guide you through a comprehensive Ingress demonstration of creating and deploying Ingress resources with SSL certificates, a critical step in securing traffic to your backend services.
===============Topics covered==================
👉 Step-by-step demonstration of creating and deploying Ingress resources for backend services
👉 Path-based and host-based routing flows
👉 Creating and deploying services
👉 Understanding and creating the Ingress resource file
👉 Installing a cert-manager
👉 Creating cluster issuers for staging and production Let's Encrypt servers
👉 Applying SSL certificates to the host
✳️ GitHub Repository: github.com/devopsproin/certif...
✳️ Docker Images: hub.docker.com/u/devopsprosam...
Don't forget to like, comment, and subscribe for more content, and check out our complete CKA playlist link in the description below to stay updated with our latest videos.
Thank you for watching, and let's get started on mastering Kubernetes and cracking the CKA exam!
================= ⭐️⭐️⭐️⭐️⭐️⭐️⭐️ =================
📝 Get access to the notes and ppt of each video - www.youtube.com/@DevOpsPro/join
=================== Let's Connect ===================
🤝 LinkedIn - / riya-soni-3bb5111a0
🤝 LinkedIn - / devopsproin
🤝 Twitter - / devopsproin
🤝 Facebook - / devopsproin
🤝 Instagram - / devopsproin
🤝 Discord Community - / discord
==================================================
👉 Site Link:- devopspro.in/
👉 Kubernetes Playlist Link - • Certified Kubernetes A...
👉 Linux Playlist Link - • Linux Tutorials For Be...
👉 Crash Course Playlist Link - • DevOps Crash Courses i...
👉 DevOps Pro English Channel - / @devopsproenglish
Пікірлер: 137
Please help us with your valuable feedback - forms.gle/E9r3xvTxnLPKz9Hw9
Explained so Thoroughly , Thanks
Thank you so much for putting all your efforts to understand even for NON-ITs
Crisp and clear , Nice Demo on Ingress
very informative and full of knowledge
Your video is so helpful! I've been struggling with this topic for a while, but after watching your video, I feel much more confident in my understanding. Thank you! You're going to be a celebrity in the IT industry, I just know it!
@DevOpsPro
Жыл бұрын
Glad it was helpful!
Best solution i got so far for my problem. well organized. Keep it up.
Thankyou, please continue
Nice explanation.
I have a YT channel where I discuss Life and Sports, but as a professional, I am a DevOps and Kubernetes expert in Finland but I love to watch your videos in the DESI language. thanks
@DevOpsPro
10 ай бұрын
Thank you for your support and kind words!
Excellent , Very good information !
@DevOpsPro
8 ай бұрын
Thank You
Could not be much thankful for this video. All the doubts regarding ingress have been resolved now. Thanks Riya.😘
@DevOpsPro
10 ай бұрын
Thank You Narender, Glad you liked it
Awesome lecture as always, madam
you content is great we all will support you riya just keep uploading .
@DevOpsPro
Жыл бұрын
Thanks
thanks for your awesome content in hindi
Good explain
Kindly make a video explaining Network policies in K8s. Appreciate your contents, They have always been helpful. Kudos
thank you for your effort
Nice explanation...to understand the ngnix ingress ...thank you so much🙏
@DevOpsPro
9 ай бұрын
I'm glad you found the explanation helpful!
Good content please make more video mam
Nice one 🎉
crystal clear.
best explanation ever!
Hey @riya your way of explanation is awesome, looking for some more useful playlist of DevOps from you
Supperb, video i mean exact production view..your video is really amazing and it will help alot of junior and learner please keep it up and make more issue and production video 👍 thanks for this
@DevOpsPro
Жыл бұрын
I will try my best
awesome
Well explained..keep going 😊
@DevOpsPro
Жыл бұрын
Thanks a lot 😊
nice one, ty
Very good content riya thank you so much i did know about ingress but i didn't about how to add tls or SSL certificates thanks for your explanation thank you very much 🙏
@DevOpsPro
9 ай бұрын
You're welcome! Glad it was helpful. 🙌
lovely...
Yeh wala thora uper uper se nikal gya!! but hats off your efforts put in animations and graphics to make the content awesome yet easy to grasp. Well Done 👏
@DevOpsPro
10 ай бұрын
Thank you so much 😀
Thank you Riya for your Awsome explaination. Do I need to buy domain name to perform this ingress practical? is there any alternate way to get domain name?
good
Video is great 👍🏼 I have one little doubt what if i want to use website from internet then i need to use nodeport service right instead of clusterip? Other steps will be same?
@DevOpsPro
Жыл бұрын
Yes, you can use a NodePort service to expose your website to the internet instead of a ClusterIP. The other steps to configure the Ingress resource and setup the ingress controller should be the same, but it's important to implement proper security measures.
hi @riya one doubt what was the difference in prod and stage file that make prod cert as locked https when prod was applied to ingress.yml can you please tell. thanks riya for the video it was great.
❤❤
in production do we setup tls/ssl certification like this ? or we would need another server of lets encrypt?
! Great 👍 I have a question about ssl if my SSL certificate is already installed on my domain then it's necessary setup SSL certificate from kubernetes cluster ? Hope you understand what I want to say .
@DevOpsPro
8 ай бұрын
No, if your SSL certificate is already installed on your domain, it's not necessary to set up the SSL certificate from the Kubernetes cluster. The Ingress in Kubernetes can use the existing SSL certificate configured on your domain. Hope this helps! 👍
Very nice pv and pvc storage class bhi pls
@DevOpsPro
10 ай бұрын
Here you go. kzread.info/dash/bejne/aHufp6iqlM3KgrA.html
kya ye sab hum helm chart se bhi kar sakte hai
Good content ..., Would like to add can be done using the public IP that is given by ingress and then map that IP in DNS that would have conveyed better... Thanks.....
@DevOpsPro
Жыл бұрын
Thanks for your feedback! Mapping the public IP given by ingress in DNS is definitely another way to achieve the same result. I appreciate you sharing this tip with the community!
@wag103
11 ай бұрын
can you make a detail vid sir?
@shayelasharma1039
11 ай бұрын
can you please explain how to do it
I am getting 404 error by coming through domain but with my ingress ip the application is accessible. Although the ssl certificate is applied on domain i am using company custom certificate
Hello, have you defined this sample-1, sample-2 etc in application code or its just fine. actually applications by default listens on "/" path. please clarify. thanks
@DevOpsPro
Ай бұрын
No, Its just a name of service and path where we want to expose.
Mam, aapne jo nginix controller install kiye, woh kind cluster ke liye chal rhi hai. Mera kubeadm mai setup hai, isme ingress controller pendinf bata rha hai
@DevOpsPro
7 ай бұрын
Follow this guide to install it - platform9.com/learn/v1.0/tutorials/nginix-controller-via-yaml
Hi Riya, Can you please organaise the series of video in proper way by topics Than It will be better for Begginer Tnanks
@DevOpsPro
7 ай бұрын
We've already organised the videos into a playlist to make it easier for everyone. You can find it here: kzread.info/head/PLY63ZQr2Y5BHkJJhwPjJuJ41CIyv3m7Ru
Does this certificate expire? if yes, how do we update these certs?
Amazing video...kindly advise if we have a cluster set by kubeadm tool on AWS Cloud and we have multiple deployments running in that cluster and we want to attach load balancer with that cluster and want to make all the deployments accessible through load balancer, then how can it be done
@DevOpsPro
Жыл бұрын
To attach a load balancer to your kubeadm-based Kubernetes cluster on AWS, follow these steps: 1. Provision an AWS Load Balancer (ALB/NLB). 2. Configure the load balancer to point to your cluster's worker nodes. 3. Expose deployments using a LoadBalancer type Service. 4. Verify that the load balancer routes traffic to the deployments. Hope this helps! Let me know if you have any more questions.
@samikshasharma3544
Жыл бұрын
@@DevOpsPro thank you for responding. But what about the target group. Like if we have four deployments running inside a cluster for which we have four services as load balancer for each. So, please let me know that do we need to expose different service ports for each service as I think in target group we need to give these service ports of all four service files so that the traffic can route to each different service through their ports.
@DevOpsPro
Жыл бұрын
Yes, you would need to expose different service ports for each service in order to route traffic to the correct deployment through the loadbalancer. Each deployment/service will have its own target group in the loadbalancer configuration, specifying the corresponding service port. This ensures that traffic is correctly routed to each service within the cluster.
@samikshasharma3544
Жыл бұрын
@@DevOpsPro thank you so much for clearing the doubts ❤
@nazil_kottakkal
10 ай бұрын
will u make a video for this @@DevOpsPro
Hello Mam, If I am using kubeadm and it is having 2nodes, So how can i add ip for A record in DNS name hostinger.
Hi Mam, for generating the certificate which server ip I need to map master node or worker node. I'm exposing my service on Nodeport.
@DevOpsPro
10 ай бұрын
master node
What would an enter be without a domain host
I didn't understand the dns record value part. Can anyone explain what value i should use
I am doing the very same thing on baremetal but when i hit on browser it's not working. when i am doing curl ip:port i am getting the result on terminal
Mam, before go for ssl certificate, i faced a issue it was showing 404 error. Kindly help
@DevOpsPro
7 ай бұрын
Check your Ingress resource configuration and ensure the paths are correctly defined.
to create A record , do we need to update /etc/hosts file
@DevOpsPro
4 ай бұрын
If you have actually purchased a domain, you'll need to add the A record from your DNS provider (from where you purchased the domain by default). But if you want to test on your local system without actually purchasing the domain, you can add that entry to /etc/hosts file.
But i can't access out side of cluster what i need to add in dns external ip or cloud provider ip you have missed this in video
Can we define multiple ingress controller in different nodes with same route for disaster recovery Pls confirm
@DevOpsPro
6 ай бұрын
Yes
Can I need to buy a multiple domains for this practicals
@DevOpsPro
Жыл бұрын
no
Kya in sabko ek hi namespace main rakhna hai kya ya kis ka namespace hum allg kar sakte hai
@DevOpsPro
10 ай бұрын
EK hi me
@AjayKumar-lm4yr
10 ай бұрын
@@DevOpsPro mujhe kuch services ke namespace aalg karne hai but ingress ip ek hi chahiye, main kya kar sakta hu
Hi @Riya, how the nginx is exposed with url or external ip address. Thanks in advance
@DevOpsPro
8 ай бұрын
Nginx ingress controller is exposed through nodeport service.
Hey I have installed the ingress-controller in my minikube-cluster i am not getting which ip I should provide in my Godaddy DNS
@DevOpsPro
3 ай бұрын
Is your minikube cluster on your laptop, or some cloud server
i didnt get external ip of ingress controller . what will i do ?
@DevOpsPro
10 ай бұрын
Check Ingress controller deployment and backend service.
@nazil_kottakkal
10 ай бұрын
thank u for ur reply , iam using local cluster without cloud provider so i didnt get external ip , would you tell me how to connect with aws loadbalacer @@DevOpsPro
Assalam o Alaikom Ma'm .... as i got confused in the very begining of training tutorial that we must create our Dns record , how gonna create DNS record even we have not configured DNS server either the .yml file create itself or by-default it will be created while executing the yaml file...please Guide me ...
@DevOpsPro
9 ай бұрын
In this tutorial, the DNS record creation is not covered. You can create DNS records separately using your DNS provider or service. The .yaml file you apply will route traffic based on the paths defined within it.
Please guide how to create DNS record, few steps would suffice. if you could share some resource to look upto
@DevOpsPro
11 ай бұрын
Here's a brief guide to get you started: 1. Log in to your domain registrar or DNS hosting provider. 2. Look for the DNS management section or something similar. 3. Add a new DNS record (often called an "A record" or "CNAME record") depending on your needs. 4. Enter the desired hostname (e.g., "subdomain.yourdomain.com") in the record. 5. Point the record to the external IP address of your Ingress controller or load balancer. For more detailed instructions and additional resources, I recommend checking out the documentation of your domain registrar or hosting provider. They often have step-by-step guides tailored to their specific platform. Good luck!
@AjayKumar-lm4yr
11 ай бұрын
@@DevOpsPro maine apne system ki public IP hostinger par update kar di hai tab bhi domain se access nhi kar pa raha hu. Or ingress to nodeport se local ip de raha hai bas Main ye sab apni local base machine par kar raha hu
please guide me about dns with ingress
Hello , i did exactly the same, but still iam not able to access the application, then i found that when we hit kubectl decrible ingress commnand , there is nothing in the ADDRESS section,please help me out
@DevOpsPro
8 ай бұрын
The missing ADDRESS section in the kubectl describe ingress output could indicate a problem with your Ingress setup. Ensure that your Ingress resource is configured correctly, and the Ingress controller is running without errors. Double-check your Ingress rules and ensure that your services are up and running.
@techlife310
8 ай бұрын
@@DevOpsPro Hello , Thank-you for your reply, the problem got resolved after doing fresh installation of cluster , but still iam not getting the application on the browser, i have checked with the command kubectl describe ingress ingress-nginx and i got exactly same as you got , still not able to get it right
@techlife310
8 ай бұрын
Do we have to add domain name or any IP in /etc/hosts file ?
ma'am please come with some production grade projects, eg: microservices , multi tier applications on kubernetes. please choose good project source code
@DevOpsPro
8 ай бұрын
Thank you for your suggestion! We're actively working on bringing production-grade projects to the channel. Stay tuned for exciting content updates.
I am facing error port 80 connection refused to connect
All are same port numbers and network is different how ? and all are different app or same app kindly clarify my doubts
@DevOpsPro
11 ай бұрын
In the video demonstration, the same port number was used for simplicity, but each service represented a different application.
@harikrishnaobbu5731
11 ай бұрын
Tqsh and that means every pod one application then only we can provide same port for different applications if I am wrong correct me please 🙏🏼
Where we need to point this subdomain. mean IP or Endpoint ? Where your VMs is created. AWS EC2 and or another cloud ? kindly explain in case of 3 Node HA Cluster. Or in case of AWS EKS use ELB to Expose application. What happen if i setup 3 EC2 Node. How to expose service on my domain with Https.? Please answer
@DevOpsPro
Ай бұрын
You'll need to point the subdomain to the IP or endpoint where your Kubernetes cluster resides. If you're using AWS EC2, it would be the IP of your EC2 instances; for AWS EKS, you'd typically use an ELB. In a 3-node HA cluster, ensure your Ingress controller is highly available. For HTTPS, follow the steps in the video to set up SSL certificates with cert-manager.
How nginx controller will read nginx resource file
@DevOpsPro
2 күн бұрын
The nginx controller in Kubernetes reads nginx resource files using annotations and configuration settings specified within the Ingress resource itself.
Jaisa apne bola wo sab Kara par na meri site najar aai na SSL jabki koi error bhi nhi dekh Raha or sab wesa hi hai jaisa hona chahiye par site nhi dekh Rahi na SSL
Hi Madam how to remove an existing domain from ingress.
@DevOpsPro
7 ай бұрын
You can delete an existing domain from your Ingress by editing your Ingress resource and removing the domain from the spec.rules.host
custom domains not accessible in browser
@amitmeshram6276
Ай бұрын
what is the problem i am installed in local clusters set up
how i get docker image
@DevOpsPro
Жыл бұрын
hub.docker.com/u/devopsprosamples
Could you please use English since so many wants to utilise your knowledge
@DevOpsPro
3 ай бұрын
I have an english channel also, will definitely upload k8s playlist over there.
Hi I am getting false error when i use this cmd kubectl get certificate. kubectl get certificate NAME READY SECRET AGE tls-secret False tls-secret 13s even I have attached dns.
@DevOpsPro
Ай бұрын
It seems like there might be an issue with the certificate configuration or the DNS attachment. Double-check your certificate setup and ensure that the DNS is correctly configured. If the issue persists, reviewing the logs or events associated with the certificate might provide more insight into the problem.
hi iam getting false error when i use this cmd kubectl get certificate
@DevOpsPro
3 ай бұрын
Please share error details
@muruligowda2985
3 ай бұрын
@@DevOpsPro I resolve the error.. We should configure dns then only it issues the certificate .. thanks for the reply 🥰