Skip to content

Nginx Ingress⚓︎

Important: The NGINX ingress should only be used for open deployments where EOEPCA’s IAM-based request authorization is not required - or you are integrating your own IAM approach. If you are following the IAM integration and request authorization approach described in this guide, then select the APISIX Ingress instead.

This document provides instructions to deploy ingress-nginx for EOEPCA+.

Quickstart Installation⚓︎

Disclaimer: We recommend following the official installation instructions for the NGINX Ingress Controller. However, this quick start guide should also work for most environments.

helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update

helm upgrade -i ingress-nginx ingress-nginx/ingress-nginx \
  --namespace ingress-nginx --create-namespace \
  --set controller.ingressClassResource.default=true \
  --set controller.allowSnippetAnnotations=true \
  --set controller.service.type=LoadBalancer

Adjust parameters as needed (e.g. NodePort vs. LoadBalancer service).

Forced TLS Redirection⚓︎

By default, if you want to force HTTP→HTTPS redirection, you can use an ingress annotation or config snippet. For instance:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: my-service
  annotations:
    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
spec:
  ingressClassName: nginx
  tls:
    - hosts:
        - "my-service.example.com"
      secretName: my-service-tls
  rules:
    - host: my-service.example.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: my-service
                port:
                  number: 80

Uninstallation⚓︎

helm -n ingress-nginx uninstall ingress-nginx
kubectl delete ns ingress-nginx