https://rancher.com/ logo
Join Slack
Powered by
This message was deleted.
# general
a
This message was deleted.
c
k3s comes with traefik, rke and rke2 come with ingress-nginx
m
I see
c
if you’re using some other cluster (aks, gke, so on) then I don’t think it comes with anything
you should find something in the kube-system namespace
m
Thanks so much @creamy-pencil-82913. We use k3s i will check in the kube-system namespace
I see that we are using Traefik and one interesting scenario is SSL certs are not served with Traefik where is a HTTP client side error which is not a major outage - 405 error type to be precise
And so we are looking to switch to Istio and also understand what benefits it provides
c
what do you mean “SSL certs are not served with Traefik”
m
URL in the browser shows 
connection not secured
in the event of a 405 error even though the certs are very much valid. I would expect the URL to show the lock sign (that indicates connection is secure)
c
you can set the traefik default cert so that it doesn’t fall back to the traefik self-signed cert…
It’s either that or you’re connecting to it over http instead of https, not sure which you’re talking about
m
I am sure that i am connecting via HTTPS. As i mentioned TLS works fine in all cases except the one scenario where there is a 405 error. We use cert-manager and letsencrypt certs and there is nothing wrong with the certs
11 Views
Open in Slack
PreviousNext
Powered by