Step-by-Step Guide: Publish AKS with Application Gateway Ingress Controller
Vložit
- čas přidán 8. 07. 2024
- In this video, we take a look at the Azure Application Gateway Ingress Controller, and learn how to use it to securely publish AKS Services.
The script and links for this article can be found here: zoomspeaks.tech/publishing-ak...
0:00 Problem description
4:43 How AGIC works
7:56 Creating the Application Gateway
9:52 Onboarding AGIC on an existing AKS Cluster
11:52 Deploying the Ingress
You, sir, are a hidden treasure!
You should re-write the Microsoft documentation for them. You explained this very well.
I agree
One of the best explanations I've seen on this topic, straight to the point. Many thanks
Nice video!
Excellent. You explained in a very simple language
Nice and clear explanation. Thank you
Great tutorial. Thank you
Well explained !
Amazing explanation! Can I have multiple ingresses for two different webapps for the same AGIC? so eventually I would have one external IP which is the AppGW IP?
So this is Azure application gateway ingress controller with the k8s ingress controller:ngnix type? Dual ingress to cover all security ?
I found this type of AKS setup unsatisfying.
If you kill a pod and simulate some sort of application panic or crash the information about this is not transmitted to the app gateway instantly. It takes several seconds for the app gateway ingress controller to transfer this information over azure resource manger so it can reconfigure the app gateway to inform him that the pod is gone. During this time you will get many more 500 errors then you would with a standard ingress controller setup.
Would love to hear your feedback on this.
can we configure multiple namespace (dev , qa and staging) and point to respective env from single application gateway?
Hi Frrod, yes that is quite a common setup. Just simply make sure that each Ingress yaml file is created in a separate namespace.
How to upgrade tls/ssl version in azure cosmos DB I.e i have present tls1. 0..,I need tls 1.2
Can you please help to how to setup End-2-End TLS for application gateway?
I will be targeting that in a future video
Thanks for the video mate. Is there a repo to test this ?
The blog article has the scripts: zoomspeaks.tech/publishing-aks-with-agic
Has the deployment to mount the secret from the provider in order to get this to work for the ingress tls configuration?
Hi Sir, good morning, would like to check if we can also use the cert-manager in this method, maybe you have some simple flow that we can replicate. thanks :)
I do not have any experience with cert-manager yet. I am not sure whether it supports key-vault.
Do you known if agic Works in front of many kubernetes? This aks using the same app gw
As far as I know, each application gateway ingress controller controls one and only one application gateway. If you have a multi-cluster setup, you should consider an additional layer on top of all application gateways using something like API Management, FrontDoor, or even Traffic Manager or Global Loadbalancer. The options are many and it depends on your services that you’re hosting.
Hello, Thank you for teh video. Could you please share the nginx and basic ingress yaml please
Link to blog post with all code snippets: zoomspeaks.tech/publishing-aks-with-agic
hi very use full session which is so help to me.. And please let me know to we App gateway load balancer in ingress file using App service custom managed wildcard certificate purchased from Azure and i stored in Azure key vault . how we use that certificate in ingress file in aks cluster
Sure, here is a guide on how to do that: azure.github.io/application-gateway-kubernetes-ingress/features/appgw-ssl-certificate/
lol this is too clear than I👌 thought
Thanks for publishing this tutorial.
I have configured it in the same way but somehow it's showing a bad gateway error. Could you please help me to fix it.
Please share your email I will post you the issue.
hello you know how to solve this = when executing the step "az aks enable-addons -n ....." generate this error "[91mProperty id 'C:/Program Files/Git/subscriptions//resourceGroups//providers/Microsoft .Network/applicationGateways/ ' at path 'properties.addonProfiles.ingressApplicationGateway.config.applicationGatewayId' is invalid. Expect fully qualified resource Id that start with '/subscrirs/{resourceProviderNamespace}/'.←[0mptions/{subscriptionId}' or '/providers/{resourceProviderNamespace}/'. Thanks for your help!!!
It’s not able to get your gateway resource id