https://rancher.com/ logo
Title
m

miniature-ambulance-98143

05/24/2023, 4:36 PM
Where do I find the Ingress Controller used in my Rancher setup? We seem to be using Traefik and default is NGINX from this link but i can’t find any Traefik deployments in the Rancher dashboard
c

creamy-pencil-82913

05/24/2023, 4:39 PM
k3s comes with traefik, rke and rke2 come with ingress-nginx
m

miniature-ambulance-98143

05/24/2023, 4:40 PM
I see
c

creamy-pencil-82913

05/24/2023, 4:40 PM
if you’re using some other cluster (aks, gke, so on) then I don’t think it comes with anything
you should find something in the kube-system namespace
m

miniature-ambulance-98143

05/24/2023, 4:41 PM
Thanks so much @creamy-pencil-82913. We use k3s i will check in the kube-system namespace
I see that we are using Traefik and one interesting scenario is SSL certs are not served with Traefik where is a HTTP client side error which is not a major outage - 405 error type to be precise
And so we are looking to switch to Istio and also understand what benefits it provides
c

creamy-pencil-82913

05/24/2023, 8:33 PM
what do you mean “SSL certs are not served with Traefik”
m

miniature-ambulance-98143

05/25/2023, 1:36 AM
URL in the browser shows
connection not secured
in the event of a 405 error even though the certs are very much valid. I would expect the URL to show the lock sign (that indicates connection is secure)
c

creamy-pencil-82913

05/25/2023, 3:07 AM
you can set the traefik default cert so that it doesn’t fall back to the traefik self-signed cert…
It’s either that or you’re connecting to it over http instead of https, not sure which you’re talking about
m

miniature-ambulance-98143

05/25/2023, 1:35 PM
I am sure that i am connecting via HTTPS. As i mentioned TLS works fine in all cases except the one scenario where there is a 405 error. We use cert-manager and letsencrypt certs and there is nothing wrong with the certs