litmus-docs/getting-started-setup-with-ingress.md at e4d7b07bf0c8dcab0dc35221f179f3df7a2ec000

4.7 KiB

Raw Blame History

id	title	sidebar_label
setup-with-ingress	Install LitmusPortal with Ingress	Setup With Ingress

Prerequisites

Before setting up endpoint with Ingress make sure the Litmus Chaos Control Plane is installed in either one of these scopes

Install LitmusPortal with Ingress

With Litmus-2.0.0-Beta3, LitmusPortal can be installed with ingress. In the following doc, we will use the Nginx ingress controller for ingress setup.

By default, the service type is NodePort. For Ingress, we need to change the service type to ClusterIP in the following services.

litmusportal-frontend-service
litmusportal-server-service

Install Nginx Ingress Controller along with Kubernetes RBAC roles and bindings, please refer here

If you're changing ingress name from litmus-ingress to a different name, make sure to update the INGRESS_NAME environment variable in the litmusportal-server deployment

Set the environment variable INGRESS as true in the litmusportal-server deployment.

With HTTP

Sample litmus ingress manifest With HTTP

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/rewrite-target: /$1
  name: litmus-ingress
spec:
  rules:
    - host: '<HOST-NAME>'
      http:
        paths:
          - backend:
              serviceName: litmusportal-frontend-service
              servicePort: 9091
            path: /(.*)
            pathType: ImplementationSpecific
          - backend:
              serviceName: litmusportal-server-service
              servicePort: 9002
            path: /backend/(.*)
            pathType: ImplementationSpecific

kubectl apply -f <litmus_ingress_manifest> -n <PORTAL_NAMESPACE>

With HTTPS

Install CertManager

kubectl create namespace cert-manager
helm repo add jetstack https://charts.jetstack.io
helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version v1.3.0 --set installCRDs=true

Install LetsEncrypt Cluster Issuer

apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
   name: letsencrypt
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: "your@mail.com"
    privateKeySecretRef:
      name: letsencrypt
    solvers:
    - http01:
     	ingress:
        class: nginx

Sample Litmus Portal Ingress Manifest with HTTPS

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/rewrite-target: /$1
  labels:
    component: litmusportal-frontend
  name: litmusportal-ingress
  namespace: litmus
spec:
  rules:
    - host: '<HOST-NAME>'
      http:
        paths:
          - backend:
              serviceName: litmusportal-frontend-service
              servicePort: 9091
            path: /(.*)
            pathType: ImplementationSpecific
          - backend:
              serviceName: litmusportal-server-service
              servicePort: 9002
            path: /backend/(.*)
            pathType: ImplementationSpecific
  tls:
    - hosts:
        - '<HOST-NAME>'
      secretName: litmuspreview-tls-secret

kubectl apply -f <litmus_ingress_manifest> -n <PORTAL_NAMESPACE>

Resources

AKS ingress with nginx and Key Vault certificates

Ingress

4.7 KiB Raw Blame History