How to debug Kubernetes Ingress? (TLS - Cert-Manager - HTTP-01 & DNS-01 Challenges)

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail]
▬▬▬▬▬ Experience & Location 💼 ▬▬▬▬▬
► I’m a Senior Software Engineer at Juniper Networks (12+ years of experience)
► Located in San Francisco Bay Area, CA (US citizen)
▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
► LinkedIn: / anton-putra
► Twitter/X: / antonvputra
► GitHub: github.com/antonputra
► Email: [e-mail]
▬▬▬▬▬▬ Related videos 👨‍🏫 ▬▬▬▬▬▬
👉 [Playlist] Kubernetes Tutorials: • Kubernetes Tutorials
👉 [Playlist] Terraform Tutorials: • Terraform Tutorials fo...
👉 [Playlist] Network Tutorials: • Network Tutorials
👉 [Playlist] Apache Kafka Tutorials: • Apache Kafka Tutorials
👉 [Playlist] Performance Benchmarks: • Performance Benchmarks
👉 [Playlist] Database Tutorials: • Database Tutorials
▬▬▬▬▬▬▬ Timestamps ⏰ ▬▬▬▬▬▬▬
0:00 Intro
0:47 How to Secure a Website with TLS?
2:22 HTTP-01 Challenge
2:58 DNS-01 Challenge
3:37 Cert-Manager Kubernetes Ingress Workflow
5:30 HTTP-01 Challenge Demo
12:12 DNS-01 Challenge Demo
▬▬▬▬▬▬▬ Source Code 📚 ▬▬▬▬▬▬▬
► GitHub: github.com/antonputra/tutoria...
#Kubernetes #K8s #DevOps

[@AntonPutra]

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail]

[@jonhwicked6839]

This is best !! Please keep teaching!!

[@ailsontavares4564]

Thanks so much for this tutorial. Keep going!!

[@AntonPutra]

welcome!

[@Antonio-yy2ec]

Pure gold! Thank you, Anton. Keep going.

[@AntonPutra]

than you!

[@gabecerts4286]

Awesome, Thanks, the best

[@AntonPutra]

welcome!

[@arozendojr]

Your content is helping me a lot, thank you very much

[@AntonPutra]

Welcome! This one is more niche-specific, but I think a lot of people using Nginx Ingress will find it useful.

[@richinex]

Hi @AntonPutra, how do I get access to the files/resources. I have just subscribed to your videos

[@AntonPutra]

@@richinex I have a link under each video - github.com/antonputra/tutorials/tree/main/lessons/194

[@richinex]

@@AntonPutra True I found it. Thanks

[@MagDag_]

Спасибо. Привет из Флориды

[@AntonPutra]

bez problem :)

[@minhnhatcao259]

Thanks! Do I need to create kind Certificate when already install helm cert-manager?

[@AntonPutra]

you have 2 options. 1. just use annotation on the ingress and "Certificate" will be created automatically. 2. Instead of annotation you can manually create "Certificate" which will generate private key and obtain public cert from letsencrypt. first option is prefered but it's up to you

[@tdslot]

Very good video, but if I have k8s on premises behind firewall and not using AWS Route53 DNS service? I use other that not in CertManager provider list. What about this case?

[@AntonPutra]

Thanks!. Just use cert-manager with http-01, it only requires you to open port 80 and no additional integrations.

[@tdslot]

@@AntonPutra Hello, if I understood correctly then my all internal host names that exist on ingress will be exposed to public internet?

[@AntonPutra]

@@tdslot ​​⁠No, you can’t use public CA to issue certificates for your private domains, unless of course you own public domain as well. But in that case you would face dns double horizon issues. If you only need to protect your internal domains, you need to use self sign ca.

[@soufiane22v]

Amazing stuff , which tool do you use to create those extraordinary diagrams ?

[@AntonPutra]

thanks! i use adobe suite

[@soufiane22v]

@@AntonPutra thanx a lot for the quality 🙏🏻🙏🏻🙏🏻. Do have any plan to create some paid courses on udemy or on your own platform ?

[@AntonPutra]

@@soufiane22v thanks, maybe in the future

[@neelojp8460]

Thank you so much @anton, amazing stuff and how you explain it 😮😮… It’s possible to get you .bashrc custom configuration :-)) thanks

[@AntonPutra]

thanks, well it's zshell - ohmyz.sh/

[@neelojp8460]

@@AntonPutra thank you ;-))