NGINX Ingress Controller for Kubernetes Tutorial: YAML & Helm | Example | Prometheus | Grafana | EKS

[@AntonPutra]

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail] 👉 [UPDATED] AWS EKS Kubernetes Tutorial [NEW]: kzbin.info/aero/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l&si=wc6LIC5V2tD-Tzwl

[@awstherapy]

Excellent Job Anton, I've learned a lot watching your video and reading/using your code !

[@AntonPutra]

Thanks Abderrazak!

[@jack_bull]

Brilliant content! Thank you for taking the time to make this video :-) I learned a lot.

[@AntonPutra]

Thanks Todd!

[@x84sh81]

Awesome.. can u make video using gke and for nginx ingress controller not using helm? thanks

[@AntonPutra]

Yes, in the future. I have another tutorial gke + ingress if you are interested kzbin.info/www/bejne/jpCsfGN9d8d1itk

[@joeb.1163]

Another brilliant video. Thank you very much

[@AntonPutra]

Thank you Joe :)

[@zazaaaaadd]

Excellent, thanks a lot for this fantastic update Anton

[@AntonPutra]

Thanks serge, I hope 50 min is not too long for tutorials :)

[@ruwanvimukthimettananda7847]

Thanks Anton, excellent explanation as usual

[@AntonPutra]

Thanks Ruwan, I hope it's not too long :)

[@monitorcamera8850]

easy to follow , awesome video

[@AntonPutra]

Great to hear! :)

[@chasim1982]

Amazing tutorial, can I do url rewrite 3rd example with ALB Ingress Controller? any example or link, thanks

[@AntonPutra]

it seems not supported at this time => github.com/kubernetes-sigs/aws-alb-ingress-controller/issues/835

[@chasim1982]

@@AntonPutra thanks a lot

[@RakeshWaghela]

AWESOME ! I subscribed and hit the bell icon :D

[@AntonPutra]

Awesome thank you Rakesh!

[@rohittiwari5575]

Great tutorial! Can we have video on managing multiple ingress controller in the same cluster and how to define which ingress controller a ingress resource will use to route traffic? - confused with Ingress Class

[@AntonPutra]

simply spread them between different namespaces and make sure they have different ingress class names. If you use helm, just update default ingress class to something

[@HoneyHaiderMengha]

you are love @antonPutra

[@AntonPutra]

Thanks Mengha!

[@robarros21]

Thanks Anton, Could show how use ModSecurity Web Application Firewall in nginx ingress Thank you

[@AntonPutra]

Thanks for the suggestion, I'll put it in my list.

[@HoneyHaiderMengha]

Sir is it possible to make a vedio like a basic nginx app and ingress deployment along with load balancer

[@AntonPutra]

I think I have plenty of them on my channel =)

[@mahesh-nn4no]

Hey Aton, you explaination is too good. But i have a doubt. what annotation should we use if install ngnix ingress controller on kubernetes cluster which is on our own Bare metal servers.

[@AntonPutra]

it depends on the version of controller and k8s cluster. Most likely you would also need to use ingress class. Annotations mostly used by custom controllers that you deployed to k8s, I would recommend to search what annotations your controller support

[@patelakshay2715]

Thank you for the great content. I have question, I want to use Amazon Certificate Management (ACM) certificate for TLS/SSL in Nginx Ingress, How can I use it?

[@AntonPutra]

You can manually create "tls" type kubernetes secret and point to it in your ingress object. In this case you need to monitor yourself certificate expiration.

[@chibimentor]

Thanks!

[@AntonPutra]

Welcome!

[@dpicollege]

Great video but i confused does values.yml consist of both nginx class and kubernetes controller class together? could you explain? should i know all object of nginx and kubernetes class?

[@AntonPutra]

Yes it does, it's done for legacy compatibility. For example cert-manager aims to support as many ingresses as posible to do that they decided to use old "annotations" instead of ingress classes. Nginx ingress class supports both class name and old annotation "nginx class"

[@AntonPutra]

👉 How to Manage Secrets in Terraform - kzbin.info/www/bejne/aX-TpXqBrNt1mqM 👉 Terraform Tips & Tricks - kzbin.info/www/bejne/bYScZaKLid5lsJY 👉 ArgoCD Tutorial - kzbin.info/www/bejne/sHjRlZqafMZkisU

[@AntonPutra]

⏱️TIMESTAMPS⏱️ 0:00 Intro 2:31 Deploy Prometheus on Kubernetes Cluster 6:02 Deploy Nginx Ingress Controller (YAML & HELM) 12:20 Monitor Nginx Ingress with Prometheus 13:47 Deploy Grafana on Kubernetes Cluster 15:36 Import Nginx Ingress Controller Grafana Dashboard 17:32 Create Ingress for Prometheus (Ex. 1) 20:03 Test Nginx Ingress Admission Webhook 22:02 Create Ingress for Grafana (Ex. 2) 23:38 Simple Fanout Ingress Example (Ex. 3) 28:44 Virtual Hosting Ingress Example (Ex. 4) 30:10 Nginx Ingress TLS Example (Ex. 5) 38:01 Nginx Ingress Different Namespaces Example (Ex. 6) 41:13 Nginx Ingress TCP Example (Ex. 7) 46:09 Monitor Nginx Ingress with Grafana

[@LalitYadav-eo4hv]

As always another great video, very helpful. I will try this today.

[@ramallways6321]

Hi...I've tried the ingress rule as path based routing rather than hostname based, while checking in the grafana, I've seen only the ingress of hostname based routing, I couldn't see the path based ingress file metrics...Can you give the idea about this...? I need to see path based routing metrics also...

[@sulaimantriarjo8097]

Hi Anton. Nice tutorials. But I got prometheus-operator pod always pending. I run in in virtual machine using Ubuntu 20 in Hyper-v windows 11.

[@AntonPutra]

you can describe it to get the error message "kubectl describe pod prometheus-operator..."

[@sulaimantriarjo8097]

@@AntonPutra It replied with the pod name is not found. Something like that. I have copied paste the name from kubectl get pods -A

[@AntonPutra]

@@sulaimantriarjo8097 "-A" will give all pods in all namespace, but if you need to describe an object such as pod, do not use "-A" instead use "-n "

[@SachinSharma-kk1up]

Thx for wonderful session. Can we configure nginx ingress using selected ip from subnet as we do in aks as internal LB ip . I tried in eks it created but with random ip from subnet schema as internal but I want specific ip .

[@AntonPutra]

You can allocate an Elastic IP address and use it for your load balancer. aws.amazon.com/premiumsupport/knowledge-center/elb-attach-elastic-ip-to-public-nlb/

[@ebiscaia]

What is the advantage of using SSL certificates in the Ingress instead of putting a reverse proxy in front of Ingress to handle the certificates?

[@AntonPutra]

nginx ingress is a reverse proxy (it's literally nginx), don't add unnecessary complexity

[@ebiscaia]

@@AntonPutra Ok. In my case to avoid complexity I will keep my Nginx reverse proxy dealing with that.

[@AntonPutra]

@@ebiscaia Sure just don't forget to configure body size, source headers on both proxies. As far as I remember body size on ingress around 1mb

[@richarmunicosamaniego8216]

... external DNS with GCP ..., like it

[@AntonPutra]

thanks:)

[@qwerfdsdsdfghd]

coudl you make example of NGINX Ingress Controller for Kubernetes Tutorial: YAML & Helm with using terraform ?

[@AntonPutra]

Do you mean to use Kubernetes Provider to deploy nginx ingress? Link - registry.terraform.io/providers/hashicorp/kubernetes/latest/docs

[@mikailalperen]

I followed the same steps but on Nginx Ingress TCP Example part I can't connect to postgres. The only different thing I did is used external Ip of Loadbalancer instead of creating CNAME, but does it make any difference ?

[@AntonPutra]

No it should nod. In general you need to use IP that created by the service of type loadbalancer during the installation of ingress

[@mikailalperen]

I found the problem :) that was about my firewall and it is working now @@AntonPutra

[@Rkagr208]

I am in a weird situation, I follow your examples to create the EKS cluster using terraform but for the ingress controller we need to do the irsa thing, right? i.e. setting the service account with the IAM roles and the identity provider in AWS part. I am not able to fix that and it is not present in your tutorials. When I create the ingress controller and the ingress, everything is fine just the ingress controller is not able to create the alb for that ingress. Could you please help me here?

[@AntonPutra]

I have a new tutorial with explanation how to set up irsa. antonputra.com/Terraform/how-to-create-eks-cluster-using-terraform/#create-iam-oidc-provider-eks-using-terraform

[@premierde]

👏Can we add metallb as LB in ingress values file

[@AntonPutra]

I haven't used MetalLB

[@AntonPutra]

🔴PART 2🔴 Cert Manager Kubernetes Tutorial (Let's Encrypt & Nginx Ingress & ACME | 5 Examples | YAML & HELM) - kzbin.info/www/bejne/bZ6XkJ6QhLSVsNk 🔴UPDATED🔴: How to Create EKS Cluster Using Terraform - kzbin.info/www/bejne/g4vco6uwl5ysd7c

[@AntonPutra]

Will be released on September 6, 2021.

[@mozhago8280]

I'm getting this error "Error syncing load balancer: failed to ensure load balancer: LoadBalancerIP cannot be specified for AWS ELB" when setting LoadbalancerIP for controller service, Any idea

[@AntonPutra]

You getting this error when trying to use static/elastic IP for load balancer? What EKS version are you using?

[@MohammadFazil]

Can we've the same for using Azure kubernetes services

[@AntonPutra]

Sure, in the future, I'm planning to create a few lessons for Azure cloud.

[@philippsagalovich8170]

hello, is possible that one ingress controller manage some ingresses in different namespaces????

[@AntonPutra]

Yes, ingress is a global resource. One ingress controller can be used to create ingresses in any namespace

[@philippsagalovich8170]

@@AntonPutra is there other way? id possible point inside the ingress serviceName in next format - ..svc.cluster.local -????

[@AntonPutra]

@@philippsagalovich8170 you mean one ingresses and different namespaces? you can create external name as I did in the video. Generally not recomended

[@fil1806]

@@AntonPutra what u recommend? How to share lb to some namespaces. We have a lot of namespaces and now in default namespace about 100 external services….

[@AntonPutra]

@@fil1806 oh, it's pretty standard, you need a single LB for ingress, then you can create ingresses in all your namespaces. They will share the single load balancer.

[@LalitYadav-eo4hv]

Helm version: v3.6.3

[@AntonPutra]

you need to install prometheus before ingress, since it uses CRD - ServiceMonitor.

[@LalitYadav-eo4hv]

@@AntonPutra i believe I followed the same steps, let me try again today. Thank u for ur reply really appreciated

[@Яслежузатобой-щ7б]

Тебе как вообще умудрилось в айти залететь?

[@AntonPutra]

4 years of college :) I got Computer Science degree from University of Pittsburgh then moved to Silicon Valley (sorry I don't have Russian keyboard)

[@kkkant1547]

Hello I'm using the terraform for the infrastructure provisioning but I cant able to find how can I setup using terraform is there is any way to setup this using terraform as you are using the eksctl tool soo I need to work with eksctl tool with terraform ?

[@AntonPutra]

Take a look at this tutorial - kzbin.info/www/bejne/pYqri2Z7hbdjb5Y