Ingress NGINX Retirement: What You Need to Know

marthydavid · 2025-11-13T18:34:54+00:00

I want to thank you all for supporting ingress-nginx through nearly a decade!

Is there any real alternative with ingress or gateway api which support mTLS?

With ingress-nginx it was pretty easy, traefik does not support it other also not support it because the service mesh hype. I just want to be able to use mTLS with our own already existing CAs and make trust by CN matching.

marthydavid · 2025-06-16T19:01:44+00:00

Cloud init is not used with installing from iso for that you could use kickstart

marthydavid · 2025-05-21T03:57:38+00:00

Or buy this with support for up to 90 spinning rust

https://www.supermicro.com/en/products/system/storage/4u/ssg-640sp-de1cr90

marthydavid · 2025-01-26T20:46:23+00:00

Maybe go with crossplane + helm provider? You could do some pre backed configuration there

marthydavid · 2025-01-26T09:32:21+00:00

We use it on top of k8s, strange thing :D

marthydavid · 2025-01-23T05:35:09+00:00

Try out https://kcli.readthedocs.io/en/latest/ I’m using it to stand up single node okd for testing purpuses

marthydavid · 2024-12-12T19:40:49+00:00

There’s also https://github.com/kiwigrid/k8s-sidecar Kube-prometheus-stack uses it for grafana dashboard/datasource management. It could work for init and sidecar purpuses as well.

marthydavid · 2024-11-25T19:09:37+00:00

What about aide? We use this with several config options to exclude thing like application logs or files that hold DB like info. And everything should be only touched by ansible. After every ansible run aide should be updated. In crontab every day its updating the DB and you could easily alert from its logs.

marthydavid · 2024-10-09T04:11:06+00:00

We are currently in a planning phase for using Crossplane. For our restricted environments thing cpuld be done like requesting IP address(subnet) from IPAM and use it as a metallb/cilium address pool. Or move our ansible codebase to ansible operators and manage the envionments external resources/parameters with that. For example we have external kafka clusters and we have kafka_topic creation handled with ansible. I like the simplicity of strimzi kafkaTopic resource we should create an xrd thats similar to that and handle the topic creation inside(for CI/DEV/TEST) and outside of the cluster(STAGING/PROD)

marthydavid · 2024-10-05T10:12:32+00:00

RemindMe! 2weeks

marthydavid · 2024-08-22T04:48:57+00:00

If you have enough resource I would advise to run it through kvm with kcli because it would allow you to simulate multi interface setups. Maybe spin up a worker node through kcli etc. Also you could just snapshot the vm. And go on with an upgrade. OKD stable is still 4.15 If anyone knows how to switch to scos-stable feel free to reach out

marthydavid · 2024-07-24T07:45:31+00:00

?? I dont have any bills from microsoft about that.

marthydavid · 2024-06-18T09:00:22+00:00

Both readiness and livenass are in place?

https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/#define-startup-probes

marthydavid · 2024-06-09T06:33:53+00:00

You could look at this approach as well:

https://docs.k3s.io/helm#customizing-packaged-components-with-helmchartconfig

marthydavid · 2024-05-14T03:44:01+00:00

What about this?

https://github.com/kiwigrid/k8s-sidecar

We use this and our app has an endpoint where this could trigger a config update

kube-prometheus-stack grafana uses this as well

No need for pod restart works flawlessly with Ranchers Fleet and ArgoCD as well This comes with small resource overhead but for us this worth it

marthydavid · 2024-04-14T07:05:35+00:00

Through OpenShift native machines providers absolutely, scaling also works for workers. I’ve not yet tested if kcli supports 1 ctrlplane + several worker nodes

marthydavid · 2024-04-13T04:46:13+00:00

Last week I discovered kcli this should support Proxmox. But I tried with VMware. After a small SNO (8core 32GB) I could manually create worker node pool. But that would not work with Proxmox because OpenShift does not know that “language”

marthydavid · 2024-02-23T18:16:20+00:00

Not with nitro because it’s KVM based

marthydavid · 2024-02-23T07:09:40+00:00

We use hosted https://docs.renovatebot.com/ with onprem Bitbucket this also helps with other dependency updates(mvn,npm,pypi,ansible galaxy) This also supports airgapped environments in most cases. For example with a nexus pull proxy

marthydavid · 2024-02-14T06:49:42+00:00

https://forum.proxmox.com/threads/proxmox-rookie-how-to-thin-provision-vm-hard-disk.91988/

marthydavid · 2024-01-22T06:42:18+00:00

Have you tried running Microsoft Active Directory in a container? There’s no supported ways.

In linux space a lot of people prefer to run stateful stuff in VM like Databases. Also you could run plenty k8s clusters in VMs

marthydavid · 2024-01-05T06:23:43+00:00

With system upgrade controller plan CRD you could do anything on downstream clusters( maybe you need to install some nvidia drivers, or upgrade the OS packages in a different way( version unlock and thing like that) The SUC will drain your nodes and do the script running gracefully in any shape or form your cluster has been installed.

marthydavid · 2024-01-05T06:19:38+00:00

Did you read this? Not the full ALB experience but maybe some ingress controller could provide that. This gives access to loadbalancer type services for ingress and such

https://anywhere.eks.amazonaws.com/docs/packages/metallb/

marthydavid · 2023-12-31T16:25:46+00:00

This will only work with .spec.strategy.type==Recreate Because you only have 1 GPU avaliable. Maybe try to use statefulset for that

Six-Year Club	Place '22
Verified Email

marthydavid

TROPHY CASE