MetalLB IPs must not be shared with any other system. That includes DHCP servers and Kubernetes node IPs. IP conflicts result in hard to debug failures, and generally just doesn't work correctly.
In case some ingress have a syntax error in the snippet configuration,
the freshly generated configuration will not be reloaded to prevent tearing down existing rules.
Although, once inserted, this configuration is preventing from any other valid configuration to be inserted as it remains in the ingresses of the cluster.
To solve this problem, implement an optional validation webhook that simulates the addition of the ingress to be added together with the rest of ingresses.
In case the generated configuration is not validated by nginx, deny the insertion of the ingress.
In case certificates are mounted using kubernetes secrets, when those
changes, keys are automatically updated in the container volume, and the
controller reloads it using the filewatcher.
Related changes:
- Update vendors
- Extract useful functions to check configuration with an additional ingress
- Update documentation for validating webhook
- Add validating webhook examples
- Add a metric for each syntax check success and errors
- Add more certificate generation examples
The warnings should probably be above the script, not below, especially in the ever popular GKE, where they are prerequisites. Generic Deployment sounds like it's a deployment that should work on all vanilla Kubernetes installations. It sounds like an OR logic operator, when it should be an AND.
- Add missing label `app.kubernetes.io/part-of: ingress-nginx` for deploy example
- Update new labels for docs/deploy and docs/examples
- Update new labels for test/e2e and test/manifests
- Update new labels for images/nginx
Also close#3001
I found it confusing to see the helm after the list of generic steps (should I run `helm install ...` after I followed the steps above or is it a different way?). Also, the verification and version detection steps don't work with helm chart due to different app label (`ingress-nginx` vs `nginx-ingress`) and namespace.
This change does two things:
1. Separate helm installation from generic installation and provide version detection commands that work for helm
2. Rename `Custom Service Provider Deployment` to `Provider Specific Steps` and fix the broken link while doing so.
Manuel Alejandro de Brito Fontes
Abdul Rauf
Dave Anderson
Valentin Rul
张潇
Nick Novitski
Kubernetes Prow Robot
James Humphries
William Zhang
Thibault Jamet
Chris Carty
Angga Lanuma
Sebastiaan van Steenis
Ray Foss
Ricardo Katz
eutopian
Antoine Cotten
Jay Wallace
Wong Hoi Sing Edison
Dmitri Fedotov
Luís Fernando Guedes
Lorenz Vanthillo
David Pendray
Eren Başak
Denis Salamanca
Matt Schallert
Aarni Koskela
Francisco de Brito Fontes