https://rancher.com/ logo
#rke2
Title
# rke2
b

bored-rain-98291

07/29/2022, 1:32 PM
Not to sound like a n00b but its not clear how to modify the nginx ingress controller for normal operation. I have devs wanting to deploy their apps and set their internal hostnames. Is it basically just modifying the manifest like a normal deployment?
b

bored-rain-98291

07/29/2022, 1:47 PM
thanks i saw that. Im not sure what parts need to change. I will have to research.
v

victorious-analyst-3332

07/29/2022, 1:48 PM
you can change as many or as few values as your need to customize the component
we use it for preventing ingress pods on specific node types which have existing services on hostport 80/443, as well as adding config data to things like coredns
b

bored-rain-98291

07/29/2022, 1:48 PM
right im just not sure how much will work in a self-hosted environment. e.g. no load balancer service.
ah i see
v

victorious-analyst-3332

07/29/2022, 1:49 PM
at that point it is just a vanilla k8s ingress controller, but you can still point things like a wildcard DNS record and configure your individual ingresses for things like TLS offload
b

bored-rain-98291

07/29/2022, 1:49 PM
ive heard i need metallb to get the load balancer service but im trying to keep it least complicated 🙂
ah ok cool - thanks!
so the ingress-controller that is default should work like you expect without any modifications?
excluding the load balancer
v

victorious-analyst-3332

07/29/2022, 1:51 PM
for the most part, yeah
we use a vanilla internal RKE2 cluster on VMs running canal to host the
Rancher
chart, and it uses ingresses to handle the TLS offload and route traffic to the service
b

bored-rain-98291

07/29/2022, 1:52 PM
ok cool - really appreciate it. its been a few years since i worked with k8s and am only now working my way thru the cka cert lol
i need to review the canal - i remember setting that up
v

victorious-analyst-3332

07/29/2022, 1:53 PM
the difference between this approach and an external LB is we still need things like DNS records to get the traffic to the ingress (which includes addresses for all nodes running ingress), and don’t support things like stateful client connections that can survive ECMP rehash
b

bored-rain-98291

07/29/2022, 1:53 PM
gotcha