Ingress Demo: Step-by-Step Guide to Creating and Deploying Ingress Resources with SSL Certificate

Hello folks, Welcome to DevOps Pro!
In this video, we will guide you through a comprehensive Ingress demonstration of creating and deploying Ingress resources with SSL certificates, a critical step in securing traffic to your backend services.
===============Topics covered==================
👉 Step-by-step demonstration of creating and deploying Ingress resources for backend services
👉 Path-based and host-based routing flows
👉 Creating and deploying services
👉 Understanding and creating the Ingress resource file
👉 Installing a cert-manager
👉 Creating cluster issuers for staging and production Let's Encrypt servers
👉 Applying SSL certificates to the host
✳️ GitHub Repository: github.com/dev...
✳️ Docker Images: hub.docker.com...
Don't forget to like, comment, and subscribe for more content, and check out our complete CKA playlist link in the description below to stay updated with our latest videos.
Thank you for watching, and let's get started on mastering Kubernetes and cracking the CKA exam!
================= ⭐️⭐️⭐️⭐️⭐️⭐️⭐️ =================
📝 Get access to the notes and ppt of each video - www.youtube.co...
=================== Let's Connect ===================
🤝 LinkedIn - / riya-soni-3bb5111a0
🤝 LinkedIn - / devopsproin
🤝 Twitter - / devopsproin
🤝 Facebook - / devopsproin
🤝 Instagram - / devopsproin
🤝 Discord Community - / discord
==================================================
👉 Site Link:- devopspro.in/
👉 Kubernetes Playlist Link - • Certified Kubernetes A...
👉 Linux Playlist Link - • Linux Tutorials For Be...
👉 Crash Course Playlist Link - • DevOps Crash Courses i...
👉 DevOps Pro English Channel - / @devopsproenglish

[@DevOpsPro]

Please help us with your valuable feedback - forms.gle/E9r3xvTxnLPKz9Hw9

[@uncivilizedengineer]

I have a YT channel where I discuss Life and Sports, but as a professional, I am a DevOps and Kubernetes expert in Finland but I love to watch your videos in the DESI language. thanks

[@DevOpsPro]

Thank you for your support and kind words!

[@digvijaysingh2521]

It's Awesome video I have seen over KZbin.. really appreciate your efforts.. Thanks a lot!!

[@subhendusekharpatro7076]

Kindly make a video explaining Network policies in K8s. Appreciate your contents, They have always been helpful. Kudos

[@kishanpanchal5009]

Awasome video dear. Kindly create video for how to procure google managed certificates for the path based routing. Thanks appreciate for your good content

[@Anantsolanki-t7l]

Awesome Information

[@NarenderPanwar-dk9vy]

Could not be much thankful for this video. All the doubts regarding ingress have been resolved now. Thanks Riya.😘

[@DevOpsPro]

Thank You Narender, Glad you liked it

[@devanshnischal6306]

Explained so Thoroughly , Thanks

[@Sumantkrmishra]

Your video is so helpful! I've been struggling with this topic for a while, but after watching your video, I feel much more confident in my understanding. Thank you! You're going to be a celebrity in the IT industry, I just know it!

[@DevOpsPro]

Glad it was helpful!

[@akshaysaini1613]

Supperb, video i mean exact production view..your video is really amazing and it will help alot of junior and learner please keep it up and make more issue and production video 👍 thanks for this

[@DevOpsPro]

I will try my best

[@nareshv7797]

Thank you so much for putting all your efforts to understand even for NON-ITs

[@AshishYadhuvanshi]

awesome explaination

[@user-rx4jh5bd9r]

Yeh wala thora uper uper se nikal gya!! but hats off your efforts put in animations and graphics to make the content awesome yet easy to grasp. Well Done 👏

[@DevOpsPro]

Thank you so much 😀

[@dips_07]

Nice explanation...to understand the ngnix ingress ...thank you so much🙏

[@DevOpsPro]

I'm glad you found the explanation helpful!

[@arif-sajal]

Best solution i got so far for my problem. well organized. Keep it up.

[@anandkegaon6987]

nice video

[@_man.on.strings__]

you content is great we all will support you riya just keep uploading .

[@DevOpsPro]

Thanks

[@vaibhav.v6403]

Very good content riya thank you so much i did know about ingress but i didn't about how to add tls or SSL certificates thanks for your explanation thank you very much 🙏

[@DevOpsPro]

You're welcome! Glad it was helpful. 🙌

[@subhashKumar-yr4zg]

Hi Riya, Can you please organaise the series of video in proper way by topics Than It will be better for Begginer Tnanks

[@DevOpsPro]

We've already organised the videos into a playlist to make it easier for everyone. You can find it here: kzbin.info/aero/PLY63ZQr2Y5BHkJJhwPjJuJ41CIyv3m7Ru

[@shivamr6559]

very informative and full of knowledge

[@KRISHNAKUMAR-yj3dx]

Thanks a lot!!!

[@vibhorjain4397]

Hey @riya your way of explanation is awesome, looking for some more useful playlist of DevOps from you

[@naveenm6642]

Crisp and clear , Nice Demo on Ingress

[@rahulbakhtiani9476]

Good content ..., Would like to add can be done using the public IP that is given by ingress and then map that IP in DNS that would have conveyed better... Thanks.....

[@DevOpsPro]

Thanks for your feedback! Mapping the public IP given by ingress in DNS is definitely another way to achieve the same result. I appreciate you sharing this tip with the community!

[@wag103]

can you make a detail vid sir?

[@shayelasharma1039]

can you please explain how to do it

[@Imran_kpk]

❤❤

[@anshulbdwaj]

Hi @Riya, how the nginx is exposed with url or external ip address. Thanks in advance

[@DevOpsPro]

Nginx ingress controller is exposed through nodeport service.

[@abrarsyed7177]

Good content please make more video mam

[@RashidKhan-ss7em]

But i can't access out side of cluster what i need to add in dns external ip or cloud provider ip you have missed this in video

[@HappiestMindSet]

Excellent , Very good information !

[@DevOpsPro]

Thank You

[@rohandeokar6817]

Thank you Riya for your Awsome explaination. Do I need to buy domain name to perform this ingress practical? is there any alternate way to get domain name?

[@debrajpradhan5500]

Mam, before go for ssl certificate, i faced a issue it was showing 404 error. Kindly help

[@DevOpsPro]

Check your Ingress resource configuration and ensure the paths are correctly defined.

[@rohanrustagi7857]

thanks for your awesome content in hindi

[@Imran_kpk]

Good explain

[@jayant5555]

How to use the same architecture configuration with multi node cluster?

[@zainn7336]

mam as you mention in start you have to map these domain to server ip (in case of local development) , i dont get to which server ip is that: cluster ip which is created by kind aur nginx ingress controller service ip (service created by nginx ingress ) ?? please reply

[@smk-beatz1443]

I am getting 404 error by coming through domain but with my ingress ip the application is accessible. Although the ssl certificate is applied on domain i am using company custom certificate

[@debrajpradhan5500]

Mam, aapne jo nginix controller install kiye, woh kind cluster ke liye chal rhi hai. Mera kubeadm mai setup hai, isme ingress controller pendinf bata rha hai

[@DevOpsPro]

Follow this guide to install it - platform9.com/learn/v1.0/tutorials/nginix-controller-via-yaml

[@Learner-hg4hj]

Awesome lecture as always, madam

[@debarshiacharjee6926]

I didn't understand the dns record value part. Can anyone explain what value i should use

[@hangoutbuddy]

Nice explanation.

[@nirmesh44]

best explanation ever!

[@pralayninave8498]

thank you for your effort

[@shayelasharma1039]

Please guide how to create DNS record, few steps would suffice. if you could share some resource to look upto

[@DevOpsPro]

Here's a brief guide to get you started: 1. Log in to your domain registrar or DNS hosting provider. 2. Look for the DNS management section or something similar. 3. Add a new DNS record (often called an "A record" or "CNAME record") depending on your needs. 4. Enter the desired hostname (e.g., "subdomain.yourdomain.com") in the record. 5. Point the record to the external IP address of your Ingress controller or load balancer. For more detailed instructions and additional resources, I recommend checking out the documentation of your domain registrar or hosting provider. They often have step-by-step guides tailored to their specific platform. Good luck!

[@AjayKumar-lm4yr]

​​@@DevOpsPro maine apne system ki public IP hostinger par update kar di hai tab bhi domain se access nhi kar pa raha hu. Or ingress to nodeport se local ip de raha hai bas Main ye sab apni local base machine par kar raha hu

[@shantanumankar5294]

here w hy we not write service.yaml file for cluser ip service

[@prasannagk7811]

Thankyou, please continue

[@sumitkumar-gp7yf]

What would an enter be without a domain host

[@vikashkumarbaitha3323]

Can we have dockerfile for the mentioned image. I have one question does your dockerfile exposes the app to 3000 ? EXPOSE 3000

[@bhushangaikwad4937]

awesome

[@maneshmadhu4049]

Well explained..keep going 😊

[@DevOpsPro]

Thanks a lot 😊

[@RashidKhan-ss7em]

I am facing error port 80 connection refused to connect

[@maneshkumar4858]

Can we define multiple ingress controller in different nodes with same route for disaster recovery Pls confirm

[@DevOpsPro]

Yes

[@THESCENECREATORS]

Nice one 🎉

[@techlife310]

Hello , i did exactly the same, but still iam not able to access the application, then i found that when we hit kubectl decrible ingress commnand , there is nothing in the ADDRESS section,please help me out

[@DevOpsPro]

The missing ADDRESS section in the kubectl describe ingress output could indicate a problem with your Ingress setup. Ensure that your Ingress resource is configured correctly, and the Ingress controller is running without errors. Double-check your Ingress rules and ensure that your services are up and running.

[@techlife310]

@@DevOpsPro Hello , Thank-you for your reply, the problem got resolved after doing fresh installation of cluster , but still iam not getting the application on the browser, i have checked with the command kubectl describe ingress ingress-nginx and i got exactly same as you got , still not able to get it right

[@techlife310]

Do we have to add domain name or any IP in /etc/hosts file ?

[@user-ph7sl6mn5q]

I am doing the very same thing on baremetal but when i hit on browser it's not working. when i am doing curl ip:port i am getting the result on terminal

[@shantanumankar5294]

here why we use clusterip service from my understanding we need to use node port service

[@DevOpsPro]

ClusterIP is used for internal communication within the cluster, making services accessible only inside the cluster. NodePort, on the other hand, exposes the service externally on a specific port of each node. Use ClusterIP for internal services and NodePort when external access is needed.

[@nazil_kottakkal]

i didnt get external ip of ingress controller . what will i do ?

[@DevOpsPro]

Check Ingress controller deployment and backend service.

[@nazil_kottakkal]

thank u for ur reply , iam using local cluster without cloud provider so i didnt get external ip , would you tell me how to connect with aws loadbalacer @@DevOpsPro

[@Ashokkumar-zn1ft]

Where we need to point this subdomain. mean IP or Endpoint ? Where your VMs is created. AWS EC2 and or another cloud ? kindly explain in case of 3 Node HA Cluster. Or in case of AWS EKS use ELB to Expose application. What happen if i setup 3 EC2 Node. How to expose service on my domain with Https.? Please answer

[@DevOpsPro]

You'll need to point the subdomain to the IP or endpoint where your Kubernetes cluster resides. If you're using AWS EC2, it would be the IP of your EC2 instances; for AWS EKS, you'd typically use an ELB. In a 3-node HA cluster, ensure your Ingress controller is highly available. For HTTPS, follow the steps in the video to set up SSL certificates with cert-manager.

[@asif4505]

! Great 👍 I have a question about ssl if my SSL certificate is already installed on my domain then it's necessary setup SSL certificate from kubernetes cluster ? Hope you understand what I want to say .

[@DevOpsPro]

No, if your SSL certificate is already installed on your domain, it's not necessary to set up the SSL certificate from the Kubernetes cluster. The Ingress in Kubernetes can use the existing SSL certificate configured on your domain. Hope this helps! 👍

[@khizaryounus5901]

Hey I have installed the ingress-controller in my minikube-cluster i am not getting which ip I should provide in my Godaddy DNS

[@DevOpsPro]

Is your minikube cluster on your laptop, or some cloud server

[@udupimirror2068]

crystal clear.

[@Ajmalkhalil-cx4gf]

Hello, have you defined this sample-1, sample-2 etc in application code or its just fine. actually applications by default listens on "/" path. please clarify. thanks

[@DevOpsPro]

No, Its just a name of service and path where we want to expose.

[@amitkumarnagar132]

Hi Mam, for generating the certificate which server ip I need to map master node or worker node. I'm exposing my service on Nodeport.

[@DevOpsPro]

master node

[@girishfury2630]

lovely...

[@pathseeker3374]

very informative, but ma'am mai bs single hi like kr paonga. bhot sara like k liea to kuch alg algo use krni pdegie.

[@vikasraj9099]

I have a question you have created ingress control right with that ingress control do load balancer also create or else we have to attach load balancer to the ingress control? And can I use this nginx ingress control in production I meant to ask that can I use the same yaml file in production

[@DevOpsPro]

The Ingress resource doesn't automatically create a Load Balancer; you'll need to set that up separately. Yes, you can use the NGINX Ingress Controller in production, but make sure to adjust the YAML file for production settings

[@Yonderpassport]

will it work on alb ingress class ? or its specific to nginx

[@harikrishnaobbu5731]

All are same port numbers and network is different how ? and all are different app or same app kindly clarify my doubts

[@DevOpsPro]

In the video demonstration, the same port number was used for simplicity, but each service represented a different application.

[@harikrishnaobbu5731]

Tqsh and that means every pod one application then only we can provide same port for different applications if I am wrong correct me please 🙏🏼

[@karanravat2841]

Video is great 👍🏼 I have one little doubt what if i want to use website from internet then i need to use nodeport service right instead of clusterip? Other steps will be same?

[@DevOpsPro]

Yes, you can use a NodePort service to expose your website to the internet instead of a ClusterIP. The other steps to configure the Ingress resource and setup the ingress controller should be the same, but it's important to implement proper security measures.

[@RashidKhan-ss7em]

please guide me about dns with ingress

[@debrajpradhan5500]

Hello Mam, If I am using kubeadm and it is having 2nodes, So how can i add ip for A record in DNS name hostinger.

[@amitkhandelwal6011]

hi @riya one doubt what was the difference in prod and stage file that make prod cert as locked https when prod was applied to ingress.yml can you please tell. thanks riya for the video it was great.

[@shaikkhaja-qi2wo]

Hi Madam how to remove an existing domain from ingress.

[@DevOpsPro]

You can delete an existing domain from your Ingress by editing your Ingress resource and removing the domain from the spec.rules.host

[@handsomevillian]

Assalam o Alaikom Ma'm .... as i got confused in the very begining of training tutorial that we must create our Dns record , how gonna create DNS record even we have not configured DNS server either the .yml file create itself or by-default it will be created while executing the yaml file...please Guide me ...

[@DevOpsPro]

In this tutorial, the DNS record creation is not covered. You can create DNS records separately using your DNS provider or service. The .yaml file you apply will route traffic based on the paths defined within it.

[@yosharma5210]

Very nice pv and pvc storage class bhi pls

[@DevOpsPro]

Here you go. kzbin.info/www/bejne/bHjOdnmnmc-XiK8

[@amitmeshram6276]

custom domains not accessible in browser

[@amitmeshram6276]

what is the problem i am installed in local clusters set up

[@ShankarGidaganti]

ma'am please come with some production grade projects, eg: microservices , multi tier applications on kubernetes. please choose good project source code

[@DevOpsPro]

Thank you for your suggestion! We're actively working on bringing production-grade projects to the channel. Stay tuned for exciting content updates.

[@faizankhd]

to create A record , do we need to update /etc/hosts file

[@DevOpsPro]

If you have actually purchased a domain, you'll need to add the A record from your DNS provider (from where you purchased the domain by default). But if you want to test on your local system without actually purchasing the domain, you can add that entry to /etc/hosts file.

[@jahnvirockstarpeehumishra7491]

good

[@vishalpoudel6712]

in production do we setup tls/ssl certification like this ? or we would need another server of lets encrypt?

[@kislaysinha9772]

nice one, ty

[@assalamoalikum3579]

Does this certificate expire? if yes, how do we update these certs?

[@samikshasharma3544]

Amazing video...kindly advise if we have a cluster set by kubeadm tool on AWS Cloud and we have multiple deployments running in that cluster and we want to attach load balancer with that cluster and want to make all the deployments accessible through load balancer, then how can it be done

[@DevOpsPro]

To attach a load balancer to your kubeadm-based Kubernetes cluster on AWS, follow these steps: 1. Provision an AWS Load Balancer (ALB/NLB). 2. Configure the load balancer to point to your cluster's worker nodes. 3. Expose deployments using a LoadBalancer type Service. 4. Verify that the load balancer routes traffic to the deployments. Hope this helps! Let me know if you have any more questions.

[@samikshasharma3544]

@@DevOpsPro thank you for responding. But what about the target group. Like if we have four deployments running inside a cluster for which we have four services as load balancer for each. So, please let me know that do we need to expose different service ports for each service as I think in target group we need to give these service ports of all four service files so that the traffic can route to each different service through their ports.

[@DevOpsPro]

Yes, you would need to expose different service ports for each service in order to route traffic to the correct deployment through the loadbalancer. Each deployment/service will have its own target group in the loadbalancer configuration, specifying the corresponding service port. This ensures that traffic is correctly routed to each service within the cluster.

[@samikshasharma3544]

@@DevOpsPro thank you so much for clearing the doubts ❤

[@nazil_kottakkal]

will u make a video for this @@DevOpsPro

[@muruligowda2985]

hi iam getting false error when i use this cmd kubectl get certificate

[@DevOpsPro]

Please share error details

[@muruligowda2985]

@@DevOpsPro I resolve the error.. We should configure dns then only it issues the certificate .. thanks for the reply 🥰

[@AjayKumar-lm4yr]

Can I need to buy a multiple domains for this practicals

[@DevOpsPro]

no

[@AjayKumar-lm4yr]

Jaisa apne bola wo sab Kara par na meri site najar aai na SSL jabki koi error bhi nhi dekh Raha or sab wesa hi hai jaisa hona chahiye par site nhi dekh Rahi na SSL

[@AjayKumar-lm4yr]

Kya in sabko ek hi namespace main rakhna hai kya ya kis ka namespace hum allg kar sakte hai

[@DevOpsPro]

EK hi me

[@AjayKumar-lm4yr]

@@DevOpsPro mujhe kuch services ke namespace aalg karne hai but ingress ip ek hi chahiye, main kya kar sakta hu

[@AjayKumar-lm4yr]

kya ye sab hum helm chart se bhi kar sakte hai

[@prashantpowar9269]

how i get docker image

[@DevOpsPro]

hub.docker.com/u/devopsprosamples

[@shivajiimotupalli6555]

Could you please use English since so many wants to utilise your knowledge

[@DevOpsPro]

I have an english channel also, will definitely upload k8s playlist over there.

[@DeepakKumar-oi9cr]

Hi I am getting false error when i use this cmd kubectl get certificate. kubectl get certificate NAME READY SECRET AGE tls-secret False tls-secret 13s even I have attached dns.

[@DevOpsPro]

It seems like there might be an issue with the certificate configuration or the DNS attachment. Double-check your certificate setup and ensure that the DNS is correctly configured. If the issue persists, reviewing the logs or events associated with the certificate might provide more insight into the problem.