From 26d5c1a624b16a22ec349a3984d5bbd337934657 Mon Sep 17 00:00:00 2001 From: morbalint Date: Wed, 10 Jan 2024 19:16:12 +0100 Subject: [PATCH] fix cert-manager pod2pod comms --- README.md | 3 ++- ingress-nginx/values.yaml | 2 ++ 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 7eeaec2..2f97d54 100644 --- a/README.md +++ b/README.md @@ -22,8 +22,9 @@ Setup instructions 1. DO 1-click install argoCD into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same) 1. DO 1-click install ingress-nginx into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same) 1. DO 1-click install cert-manager into k8s cluster (TODO: replace with helm install command, I suspect behind the scenes the 1-click install does the same) +1. helm upgrade ingress-nginx to fix cert-manager pod2pod communication and enable proxy protocoll `helm upgrade ingress-nginx ingress-nginx/ingress-nginx --version 4.8.2 --namespace ingress-nginx --values ingress-nginx/values.yaml` 1. Create DNS A record for argocd.kemkas.hu pointing to the Load Balancer IP address (Load balancer is a DO object created with the ingress-nginx helm chart install) -1. helm update argocd with `argocd-values.yaml` +1. helm update argocd with `helm upgrade argocd argo/argo-cd --version 4.9.4 --namespace argocd -f argocd-values.yaml` 1. Apply all files in `argocd` directory ``` kubectl apply -f cert-manager-issuer.yaml diff --git a/ingress-nginx/values.yaml b/ingress-nginx/values.yaml index 428371b..07c9017 100644 --- a/ingress-nginx/values.yaml +++ b/ingress-nginx/values.yaml @@ -12,6 +12,8 @@ controller: service.beta.kubernetes.io/do-loadbalancer-enable-proxy-protocol: "true" # Specify whether the DigitalOcean Load Balancer should pass encrypted data to backend droplets service.beta.kubernetes.io/do-loadbalancer-tls-passthrough: "true" + # enable Pod-Pod communication through the Nginx Ingress load balancer: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes#step-5-enabling-pod-communication-through-the-load-balancer-optional + service.beta.kubernetes.io/do-loadbalancer-hostname: "workaround.dev.kemkas.hu" # Will add custom configuration options to Nginx https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/ config: