How to debug Kubernetes Ingress? (TLS - Cert-Manager - HTTP-01 & DNS-01 Challenges)

Sdílet
Vložit
  • čas přidán 29. 05. 2024
  • 🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com
    ▬▬▬▬▬ Experience & Location 💼 ▬▬▬▬▬
    ► I’m a Senior Software Engineer at Juniper Networks (12+ years of experience)
    ► Located in San Francisco Bay Area, CA (US citizen)
    ▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
    ► LinkedIn: / anton-putra
    ► Twitter/X: / antonvputra
    ► GitHub: github.com/antonputra
    ► Email: me@antonputra.com
    ▬▬▬▬▬▬ Related videos 👨‍🏫 ▬▬▬▬▬▬
    👉 [Playlist] Kubernetes Tutorials: • Kubernetes Tutorials
    👉 [Playlist] Terraform Tutorials: • Terraform Tutorials fo...
    👉 [Playlist] Network Tutorials: • Network Tutorials
    👉 [Playlist] Apache Kafka Tutorials: • Apache Kafka Tutorials
    👉 [Playlist] Performance Benchmarks: • Performance Benchmarks
    👉 [Playlist] Database Tutorials: • Database Tutorials
    ▬▬▬▬▬▬▬ Timestamps ⏰ ▬▬▬▬▬▬▬
    0:00 Intro
    0:47 How to Secure a Website with TLS?
    2:22 HTTP-01 Challenge
    2:58 DNS-01 Challenge
    3:37 Cert-Manager Kubernetes Ingress Workflow
    5:30 HTTP-01 Challenge Demo
    12:12 DNS-01 Challenge Demo
    ▬▬▬▬▬▬▬ Source Code 📚 ▬▬▬▬▬▬▬
    ► GitHub: github.com/antonputra/tutoria...
    #Kubernetes #K8s #DevOps
  • Věda a technologie

Komentáře • 24

  • @AntonPutra
    @AntonPutra  Před měsícem +2

    🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com

  • @Antonio-yy2ec
    @Antonio-yy2ec Před měsícem +3

    Pure gold! Thank you, Anton. Keep going.

  • @gabecerts4286
    @gabecerts4286 Před 23 dny +1

    Awesome, Thanks, the best

  • @arozendojr
    @arozendojr Před měsícem +2

    Your content is helping me a lot, thank you very much

    • @AntonPutra
      @AntonPutra  Před měsícem +1

      Welcome! This one is more niche-specific, but I think a lot of people using Nginx Ingress will find it useful.

    • @richinex
      @richinex Před měsícem +1

      Hi @AntonPutra, how do I get access to the files/resources. I have just subscribed to your videos

    • @AntonPutra
      @AntonPutra  Před 29 dny

      @@richinex I have a link under each video - github.com/antonputra/tutorials/tree/main/lessons/194

    • @richinex
      @richinex Před 29 dny +1

      @@AntonPutra True I found it. Thanks

  • @MagDag_
    @MagDag_ Před měsícem +1

    Спасибо. Привет из Флориды

  • @soufiane22v
    @soufiane22v Před měsícem +2

    Amazing stuff , which tool do you use to create those extraordinary diagrams ?

    • @AntonPutra
      @AntonPutra  Před měsícem +1

      thanks! i use adobe suite

    • @soufiane22v
      @soufiane22v Před měsícem

      @@AntonPutra thanx a lot for the quality 🙏🏻🙏🏻🙏🏻. Do have any plan to create some paid courses on udemy or on your own platform ?

    • @AntonPutra
      @AntonPutra  Před měsícem +2

      @@soufiane22v thanks, maybe in the future

  • @tdslot
    @tdslot Před měsícem

    Very good video, but if I have k8s on premises behind firewall and not using AWS Route53 DNS service? I use other that not in CertManager provider list. What about this case?

    • @AntonPutra
      @AntonPutra  Před měsícem

      Thanks!. Just use cert-manager with http-01, it only requires you to open port 80 and no additional integrations.

    • @tdslot
      @tdslot Před 28 dny

      @@AntonPutra Hello, if I understood correctly then my all internal host names that exist on ingress will be exposed to public internet?

    • @AntonPutra
      @AntonPutra  Před 26 dny

      @@tdslot ​​⁠No, you can’t use public CA to issue certificates for your private domains, unless of course you own public domain as well. But in that case you would face dns double horizon issues. If you only need to protect your internal domains, you need to use self sign ca.

  • @neelojp8460
    @neelojp8460 Před 21 dnem

    Thank you so much @anton, amazing stuff and how you explain it 😮😮…
    It’s possible to get you .bashrc custom configuration :-)) thanks

    • @AntonPutra
      @AntonPutra  Před 21 dnem +1

      thanks, well it's zshell - ohmyz.sh/

    • @neelojp8460
      @neelojp8460 Před 21 dnem

      @@AntonPutra thank you ;-))