Summary - Ingress

Combine host, path and TLS to write an Ingress.

Summary: Ingress

In this group:

An Ingress is a set of rules routing HTTP(S) traffic to Services by host and path; it provides a single entry point.
An Ingress controller (ingress-nginx, Traefik) applies the rules; ingressClassName chooses which one processes it.
YAML: networking.k8s.io/v1, rules[].host, paths[].path/pathType/backend.service.
Prefix and Exact matching; the longest prefix wins; defaultBackend is for unmatched requests.
TLS: spec.tls + a kubernetes.io/tls Secret; cert-manager gets certificates automatically.

kubectl get ing
curl -H "Host: magaza.example.com" http://$(minikube ip)/

Exercise A complete Ingress

Write an Ingress YAML: name magaza; ingressClassName: nginx; under tls, host magaza.example.com and secretName: magaza-tls; for host magaza.example.com, the / path (Prefix) goes to port 80 of the web service.

Show example solution

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: magaza
spec:
  ingressClassName: nginx
  tls:
    - hosts:
        - magaza.example.com
      secretName: magaza-tls
  rules:
    - host: magaza.example.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: web
                port:
                  number: 80

Test yourself

If the Ingress's ADDRESS column stays empty, what is checked first?
- The namespace quota
- The etcd backup
- Whether a controller is installed and ingressClassName matches
- The pods' image
Show answer

Whether a controller is installed and ingressClassName matches — Check kubectl get ingressclass and the controller pods.

Use prefix matching.

          - path: /api
            pathType: ____

Show answer

          - path: /api
            pathType: Prefix

Match.

Ingress

Rule
controller

Enforcer
tls

HTTPS
host

Domain name

Next lesson: What is Helm?

We Are Enhancing Your Experience

Cookie Preferences

Strictly Necessary Cookies

Analytical Cookies