Questions tagged [ingress-nginx]

If you encounter issues, review the [troubleshooting docs](https://github.com/kubernetes/ingress-nginx/blob/main/docs/troubleshooting.md), [file an issue](https://github.com/kubernetes/ingress-nginx/issues), or talk to us on the [#ingress-nginx channel](https://kubernetes.slack.com/messages/ingress-nginx) on the Kubernetes Slack server.

If you encounter issues, review the troubleshooting docs, file an issue, or talk to us on the #ingress-nginx channel on the Kubernetes Slack server.

105 questions
6
votes
3 answers

cert-manager HTTP01 certificate challenge is inaccessible when rewrite-target is enabled

We have a dozen of services exposed using a ingress-nginx controller in GKE. In order to route the traffic correctly on the same domain name, we need to use a rewrite-target rule. The services worked well without any maintenance since their launch…
5
votes
4 answers

Nginx ingress sends private IP for X-Real-IP to services

I have created a Nginx Ingress and Service with the following code: apiVersion: v1 kind: Service metadata: name: myservice spec: type: ClusterIP selector: name: my-app ports: - port: 8000 targetPort: 8000 --- apiVersion:…
4
votes
1 answer

GCP - Regional GKE cluster with Network endpoint group NEG (with HTTP LoadBalancer and Cloud Armor)

thanks to Gabriel Hodoroaga and his tutorial we have config with this flow in GCP: Internet > HTTP Load Balancer > Network Endpoint Groups > GKE in one zone > ingress-nginx But we need to switch GKE from zonal to regional. So I rebuild this config…
4
votes
0 answers

How can I use a plugin in ingress-nginx to wrap a request?

I'm trying to use the lua-circuit-breaker plugin with ingress-nginx in a Kubernetes cluster. I want to set up two upstream servers such that the first is "wrapped" with this circuit breaker, and it falls back to a different upstream endpoint in case…
3
votes
1 answer

Ingress Nginx NLB get Client Real IP (Broken header: "" while reading PROXY protocol)

I've ingress nginx controller exposed via private NLB (Network Load Balancer). I want to enable host whitelisting on ingress Nginx. My use case is to allow request from VPC1 to VPC2 and only request coming from VPC1 should be allowed to go through…
3
votes
3 answers

EKS ingress-nginx and NLB with https redirect

I'm having issues with the nlb lately, it was quite an adventure to have nlb with https termination on the lb working with a redirection http=>https and an ingress-nginx on EKS. Now, I want to have the X-Forwarded headers passed to the pod, but that…
night-gold
  • 2,202
  • 2
  • 20
  • 31
2
votes
0 answers

Huge time latency between nginx and upstream django backdend

So we have a setup of nginx ingress controller as reverse proxy for a django based backend app in production (GKE k8s cluster). We have used opentelemetry to trace this entire stack(Signoz being the actual tool). One of our most critical api is…
2
votes
1 answer

Searching correct Ingress definition for multiple services on different backends

I need help with setting up TLS termination (using ingress-nginx) for two services in different backends. Basically, the idea is to go with: https://some.url.here/serviceOne/ -> http://hostOne/ https://some.url.here/serviceTwo/ ->…
Robert Heine
  • 1,820
  • 4
  • 29
  • 61
2
votes
4 answers

Getting 503 with ingress-nginx in k3s

I've been looking through a lot of posts of 503 errors when using ingress-nginx but haven't come across a solution that works with my setup. Running on a local Oracle Linux Server v8.5. Using k3s, and the following info for the node: kubectl get…
Cthulhujr
  • 359
  • 3
  • 12
2
votes
1 answer

crashing ingress-nginx controller on Fargate-only EKS cluster due to bind() to 0.0.0.0:8443 failed (98: Address in use)

The ingress-nginx pod I have helm-installed into my EKS cluster is perpetually failing, its logs indicating the application cannot bind to 0.0.0.0:8443 (INADDR_ANY:8443). I have confirmed that 0.0.0.0:8443 is indeed already bound in the container,…
2
votes
2 answers

multiple ingress-nginx in kubernetes not validating webhook not working

As stated in the title, I currently have a configuration with 2 ingress-nginx v1.0.0 on gke v1.20.10. When I deploy one alone the configuration is working and I have no issue, but when I deploy the second one the validatingwebhook and then try to…
night-gold
  • 2,202
  • 2
  • 20
  • 31
2
votes
2 answers

docker build nginx(ingress-nginx) images slowly, how to speed up this

Sometimes we face some nginx vulnerabilities, so we need to fix the nginx vulnerabilities inside ingress-nginx, but the docker build -t image is too slow. The reason is that the dockerfile internal will make compile and make install process. How to…
auggie321
  • 41
  • 5
2
votes
1 answer

ingress-nginx, cert-manager and ingressClassName

I recently upgraded ingress-nginx to version 1.0.3. As a result, I removed the kubernetes.io/ingress.class annotation from my ingress, and put .spec.ingressClassName instead. I am running cert-manager-v1.4.0. This morning I had an email saying that…
e.dan
  • 7,275
  • 1
  • 26
  • 29
2
votes
1 answer

Q: How to rewrite single path among many with the ingress-nginx

I already have on my Ingress a lot of domains with so many paths as this is an environment with many microservices. How can I edit my ingress in some way that when someone access to path /servicex it gets instead /serviceb for example My current…
William Añez
  • 730
  • 6
  • 25
2
votes
0 answers

Ingress-Nginx regex routing rule with named capture group in path

I'm creating Kubernetes Ingress resources for an nginx Ingress Controller. The paths that I'll be using have an ID that I need to extract into a variable that may be in a different location in the path. …
Ben Randall
  • 1,205
  • 10
  • 27
1
2 3 4 5 6 7