kubernetes: updated the Readme for internal ingress controller

This commit is contained in:
2025-06-26 21:33:29 +03:00
parent 2a294eb273
commit 6bfb909431
3 changed files with 14 additions and 16 deletions

View File

@ -16,22 +16,24 @@ helm upgrade traefik traefik/traefik \
An additional ingress controller is deployed for internal access to services.
This ingress controller is used to access services that are not exposed to the
internet. It is deployed in the `internal-ingress` namespace and uses the
Traefik ingress controller.
internet. I have used the `ingress-nginx` controller for this purpose.
To utilize the internal ingress controller, add the following
`ingressClassName: traefik-internal` under ingress spec.
The initial plan was to use the `traefik` ingress controller for both but due
to short circuit issues with the external `traefik` ingress controller, I have
switched to using `ingress-nginx` for internal access.
```bash
helm upgrade --install \
--create-namespace traefik-internal traefik/traefik \
--namespace traefik-internal \
-f traefik/traefik-internal/values.yaml
helm upgrade --install ingress-nginx ingress-nginx \
--repo https://kubernetes.github.io/ingress-nginx \
--namespace ingress-nginx --create-namespace
```
The LoadBalancer service IP for the internal ingress controller is added to
the adGuard DNS server to resolve the internal services.
To utilize the internal ingress controller, add the following
`ingressClassName: nginx` under ingress spec.
# Configure Cert Manager for automating SSL certificate handling
Cert manager handles SSL certificate creation and renewal from Let's Encrypt.
@ -662,7 +664,9 @@ helm install \
## Deploy MinIO Tenant
The MinIO tenant is deployed in the `minio` namespace. The default values
are overridden with local values-tenant.yaml file.
are overridden with local values-tenant.yaml file. The minio console is exposed
via internal ingress controller (nginx). Thus, it is only accessible from the
internal network.
```bash
source .env

View File

@ -494,7 +494,7 @@ ingress:
pathType: Prefix
console:
enabled: true
ingressClassName: "traefik-internal"
ingressClassName: "nginx"
labels: {}
annotations:
traefik.ingress.kubernetes.io/router.entrypoints: websecure

View File

@ -1,6 +0,0 @@
ingressClass:
enabled: true
isDefaultClass: false
name: traefik-internal
additionalArguments:
- "--providers.kubernetesingress.ingressclass=traefik-internal"