- 
                Notifications
    
You must be signed in to change notification settings  - Fork 4.3k
 
Decide which kong proxy port to use in ingress based on kong setting #10278
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
| 
           
 
  | 
    
| 
           @tomty89: GitHub didn't allow me to request PR reviews from the following users: hamadodene. Note that only kubernetes members and repo collaborators can review this PR, and authors cannot review their own PRs. In response to this: 
 Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.  | 
    
| 
           [APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: tomty89 The full list of commands accepted by this bot can be found here. 
Needs approval from an approver in each of these files:
 
      Approvers can indicate their approval by writing   | 
    
| 
           Welcome @tomty89!   | 
    
Coupling the ingress setting with which kong proxy port to use is not exactly logical in at least some scenarios. One example would be that TLS passthrough is not supported / enabled / desired (but TLS termination is). Since the kong proxy http port needs to be enabled for it to be usable anyway, this change should not cause current setup that have TLS ingress disabled to break, while it should at the same time offer some extra flexibility (and compatibility, for e.g. "nginx/kubernetes-ingress", which apparently does not support the nginx.ingress.kubernetes.io/ssl-passthrough annotation). It does break TLS passthrough setup that for some reason have http kong proxy enabled though.
| 
           Hmm just noticed that @mrjoshuap filed a similar PR earlier already, albeit with a slightly different approach and extra polish for the annotations. I'll leave this open and let you guys decide which one to merge. Close as you wish. :)  | 
    
| 
           The Kubernetes project currently lacks enough contributors to adequately respond to all PRs. This bot triages PRs according to the following rules: 
 You can: 
 Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale  | 
    
Coupling the ingress setting with which kong proxy port to use is not exactly logical in at least some scenarios. One example would be that TLS passthrough is not supported / enabled / desired (but TLS termination is).
Since the kong proxy http port needs to be enabled for it to be usable anyway, this change should not cause current setup that have TLS ingress disabled to break, while it should at the same time offer some extra flexibility (and compatibility, for e.g. "nginx/kubernetes-ingress", which apparently does not support the nginx.ingress.kubernetes.io/ssl-passthrough annotation).
It does break TLS passthrough setup that for some reason have http kong proxy enabled though.
/cc @hamadodene @floreks @maciaszczykm
Ref.: #9861 #9863