You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2022/09/23 09:50:10 UTC

[GitHub] [apisix-ingress-controller] chrecht opened a new issue, #1359: request help: how to configure ingress controller to limit watch ingress resources

chrecht opened a new issue, #1359:
URL: https://github.com/apache/apisix-ingress-controller/issues/1359

   ### Issue description
   
   Hello,
   
   How do you limit which kubernetes ingress resource is exposed as apisix route/upstream ?
   
   Currenlty I only want to use the custom CRD to expose a route/upstream in apisix.
   I've added appNamspaces and/or namespaceSelector that only those "ingress" resources would be exposed but I think now that this has nothing todo with the sync behavoir from ingress <=> apisix...
   
   Please advice how to limit ingress exposing in apisix.
   
   Thank you
    Christian
   
   
   
   ### Environment
   
   - your apisix-ingress-controller version (output of apisix-ingress-controller version --long): v2.15.0
   - your Kubernetes cluster version (output of kubectl version): v1.20.15
   - if you run apisix-ingress-controller in Bare-metal environment, also show your OS version (uname -a): ---
   
   
   apisix, dashboard and ingress are deployed as an helm chart with the following values
           name: apisix-myname
           chart_ref: apisix/apisix
           chart_version: 0.11.1-rc1
           release_namespace: ingress-apisix
   
   ```
            apisix:
               replicaCount: 3
             discovery:
               enabled: false
             serviceMonitor:
               enabled: true
             gateway:
               type: LoadBalancer
               externalTrafficPolicy: Local
               loadBalancerIP: 10.1.1.10
               #externalIPs: []
               http:
                 enabled: true
                 servicePort: 80
                 containerPort: 9080
               tls:
                 enabled: true
                 servicePort: 443
                 containerPort: 9443
                 existingCASecret: ""
                 certCAFilename: ""
                 http2:
                   enabled: true
                 sslProtocols: "TLSv1.2 TLSv1.3"
             admin:
               enabled: true
               credentials:
                 admin: SAMPLE588f6d4dfec8d1d597c
                 viewer: SAMPLE588f6d4dfec8d1d597c
             ingress-controller:
               enabled: true
               config:
                 apisixResourceSyncInterval: "60s"
                 apisix:
                   serviceName: apisix-myname-admin
                   serviceNamespace: ingress-apisix
                   servicePort: 9180
                   adminKey: "SAMPLE588f6d4dfec8d1d597c"
                   clusterName: "default"
                 kubernetes:
                   ingressClass: "apisix"
                   ingressVersion: "networking/v1"
                   apisixRouteVersion: "apisix.apache.org/v2"
                   appNamespaces: []
                   namespaceSelector: [ "apisix.ingress=watching" ]
                   resyncInterval: "1m"
                   
             dashboard:
               enabled: true
               config:
                 conf:
                   etcd:
                     endpoints: 
                       - apisix-rtllu-etcd:2379
                 authentication:
                   users:
                     - username: user
                       password: pass
               ingress:
                 enabled: true
                 hosts:
                 - host: apisix-dashboard.domain.tld
                   paths: 
                     - /
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [apisix-ingress-controller] chrecht commented on issue #1359: request help: how to configure ingress controller to limit watch ingress resources

Posted by GitBox <gi...@apache.org>.
chrecht commented on issue #1359:
URL: https://github.com/apache/apisix-ingress-controller/issues/1359#issuecomment-1256887487

   We have a default ingressClass already set in the cluster. nginx-ingress-controller.
   
   All our exisiting ingress resources do not have ingressClass set, because of they should fallback to the default.
   
   But apisix exposes all of them as a route :-/
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [apisix-ingress-controller] chrecht closed issue #1359: request help: how to configure ingress controller to limit watch ingress resources

Posted by GitBox <gi...@apache.org>.
chrecht closed issue #1359: request help: how to configure ingress controller to limit watch ingress resources
URL: https://github.com/apache/apisix-ingress-controller/issues/1359


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [apisix-ingress-controller] tao12345666333 commented on issue #1359: request help: how to configure ingress controller to limit watch ingress resources

Posted by GitBox <gi...@apache.org>.
tao12345666333 commented on issue #1359:
URL: https://github.com/apache/apisix-ingress-controller/issues/1359#issuecomment-1256641163

   You can add Ingress class for Ingress resources.
   
   xref: https://github.com/apache/apisix-ingress-controller/blob/3619b741fd8a2779c92b0b3ae0a95bed3bc3cd4b/test/e2e/suite-ingress/suite-ingress-features/namespace.go#L74-L90


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [apisix-ingress-controller] tao12345666333 commented on issue #1359: request help: how to configure ingress controller to limit watch ingress resources

Posted by GitBox <gi...@apache.org>.
tao12345666333 commented on issue #1359:
URL: https://github.com/apache/apisix-ingress-controller/issues/1359#issuecomment-1256641800

   you can set it to `apisix` by default. it is configurable


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [apisix-ingress-controller] tao12345666333 commented on issue #1359: request help: how to configure ingress controller to limit watch ingress resources

Posted by GitBox <gi...@apache.org>.
tao12345666333 commented on issue #1359:
URL: https://github.com/apache/apisix-ingress-controller/issues/1359#issuecomment-1269986041

   We already have an isIngressEffective function that handles this logic, you can try the latest version


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


[GitHub] [apisix-ingress-controller] chrecht commented on issue #1359: request help: how to configure ingress controller to limit watch ingress resources

Posted by GitBox <gi...@apache.org>.
chrecht commented on issue #1359:
URL: https://github.com/apache/apisix-ingress-controller/issues/1359#issuecomment-1273011699

   @tao12345666333  thank you, in the latest Version it is fixed :) 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org