[GitHub] [airflow] rdeteix edited a comment on issue #16010: Helm chart: How to enable HTTPS connection

[GitBox <gi...@apache.org>]

rdeteix edited a comment on issue #16010:
URL: https://github.com/apache/airflow/issues/16010#issuecomment-1004754174


   Hello
   
   Is it still working ?
   
   I'am on k8s v1.21, helm 1.3.0, airflow 2.2.3.
   After getting an error about a missing pathType I tried :
   
   ```
     values:
       config:
          webserver:
              base_url: "http://localhost:8080/dev"
       ingress:
         enabled: true
         web:
           precedingPaths:
             - path: "/*"
               pathType: "ImplementationSpecific"
               serviceName: "ssl-redirect"
               servicePort: "use-annotation"
           path: /dev/*
           annotations:
             kubernetes.io/ingress.class: alb
             alb.ingress.kubernetes.io/scheme: internal
             alb.ingress.kubernetes.io/target-type: ip
             alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=3600
             alb.ingress.kubernetes.io/certificate-arn: mycertificate
             alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]'
             alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}'
   ```
   
   I let the service to be a cluster ip.
   My ingress gives me:
   
   ```
   Name:             airflow-dev-airflow-ingress
   Namespace:        dev
   Address:         my-adress
   Default backend:  default-http-backend:80 (<error: endpoints "default-http-backend" not found>)
   Rules:
     Host        Path  Backends
     ----        ----  --------
     *
                 /*       ssl-redirect:use-annotation (<error: endpoints "ssl-redirect" not found>)
                 /dev/*   airflow-dev-webserver:airflow-ui ()
   Annotations:  alb.ingress.kubernetes.io/actions.ssl-redirect:
                   {"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}
                 alb.ingress.kubernetes.io/certificate-arn: mycertificate
                 alb.ingress.kubernetes.io/listen-ports: [{"HTTP": 80}, {"HTTPS":443}]
                 alb.ingress.kubernetes.io/scheme: internal
                 alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=3600
                 alb.ingress.kubernetes.io/target-type: ip
                 kubernetes.io/ingress.class: alb
                 meta.helm.sh/release-name: airflow-dev
                 meta.helm.sh/release-namespace: dev
   Events:
     Type    Reason                  Age   From     Message
     ----    ------                  ----  ----     -------
     Normal  SuccessfullyReconciled  112s  ingress  Successfully reconciled
   ```
   
   The ingress manifest that it created is:
   
   ```
   apiVersion: networking.k8s.io/v1
   kind: Ingress
   metadata:
     annotations:
       alb.ingress.kubernetes.io/actions.ssl-redirect: '{"Type": "redirect", "RedirectConfig":
         { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}'
       alb.ingress.kubernetes.io/certificate-arn: *****
       alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]'
       alb.ingress.kubernetes.io/scheme: internal
       alb.ingress.kubernetes.io/target-group-attributes: stickiness.enabled=true,stickiness.lb_cookie.duration_seconds=3600
       alb.ingress.kubernetes.io/target-type: ip
       kubernetes.io/ingress.class: alb
       meta.helm.sh/release-name: airflow-dev
       meta.helm.sh/release-namespace: dev
   spec:
     rules:
     - http:
         paths:
         - backend:
             service:
               name: ssl-redirect
               port:
                 name: use-annotation
           path: /*
           pathType: ImplementationSpecific
         - backend:
             service:
               name: airflow-dev-webserver
               port:
                 name: airflow-ui
           path: /dev/*
           pathType: ImplementationSpecific
   status:
     loadBalancer:
       ingress:
       - hostname: *****
   ```
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org