Skip to content

Conversation

Jinkxed
Copy link

@Jinkxed Jinkxed commented Feb 20, 2019

I added two real examples on how we use the ALB Ingress controller both on internal application load balancers and external application load balancers.

I was unsure on where you would like to link to these examples, but please link to or use however you would like.

@k8s-ci-robot
Copy link
Contributor

Thanks for your pull request. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please follow instructions at https://git.k8s.io/community/CLA.md#the-contributor-license-agreement to sign the CLA.

It may take a couple minutes for the CLA signature to be fully registered; after that, please reply here with a new comment and we'll verify. Thanks.


  • If you've already signed a CLA, it's possible we don't have your GitHub username or you're using a different email address. Check your existing CLA data and verify that your email is set on your git commits.
  • If you signed the CLA as a corporation, please sign in with your organization's credentials at https://identity.linuxfoundation.org/projects/cncf to be authorized.
  • If you have done the above and are still having issues with the CLA being reported as unsigned, please email the CNCF helpdesk: [email protected]

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@k8s-ci-robot k8s-ci-robot added the cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. label Feb 20, 2019
@k8s-ci-robot
Copy link
Contributor

Hi @sc-chad. Thanks for your PR.

I'm waiting for a kubernetes-sigs or kubernetes member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@k8s-ci-robot k8s-ci-robot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Feb 20, 2019
@k8s-ci-robot k8s-ci-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Feb 20, 2019
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: sc-chad
To fully approve this pull request, please assign additional approvers.
We suggest the following additional approver: bigkraig

If they are not already assigned, you can assign the PR to them by writing /assign @bigkraig in a comment when ready.

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@Jinkxed
Copy link
Author

Jinkxed commented Feb 20, 2019

Signed the CLA.

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. and removed cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. labels Feb 20, 2019
@M00nF1sh
Copy link
Collaborator

This is awesome! I'll take a deeper look later today 👍

@M00nF1sh
Copy link
Collaborator

/ok-to-test

@k8s-ci-robot k8s-ci-robot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Feb 21, 2019
metadata:
name: config-map
labels:
application: web
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

better to be app.kubernetes.io/name: rails-api, list of recommended labels: https://kubernetes.io/docs/concepts/overview/working-with-objects/common-labels/

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've had issues with lookups on name versus app.kubernetes.io/name. It's probably my own understanding and how to use them. I do need to fix the labels on this config. Will add a PR.

name: config-map
labels:
application: web
namespace: some-name
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

better to be an explicit name like rails-api-example, wonder whether we should use kustomize to layout these examples

alb.ingress.kubernetes.io/certificate-arn: acm:certificate:arn
alb.ingress.kubernetes.io/scheme: internet-facing
alb.ingress.kubernetes.io/subnets: 123456789,95481321,321457987
alb.ingress.kubernetes.io/security-groups: sg-23157498
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

alb.ingress.kubernetes.io/security-groups, alb.ingress.kubernetes.io/security-subnets alb.ingress.kubernetes.io/ssl-policy should be removed. These three all have sensible default&auto-discover functionality.
Our goal is to make number annotations be as less as possible.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added them because it wasn't intuitive that they were auto discoverable when we first walking through the examples. I can add some commenting around these to show they are optional and should be auto discovered if you've taken the appropriate steps.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What if they were included but commented out?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done.

@M00nF1sh
Copy link
Collaborator

M00nF1sh commented Feb 22, 2019

@sc-chad
Overall looks good to me with nit picks.
But i'm kind of resist to merge it as examples, since it's not a working example(e.g. stuffs like external DB dependencies), too many application specific details, and i'm also not sure the design goal of use both external/internal ingress for this application.

But the knowledges are valuable, like how to do external-DNS, HPA, etc. I think it's worth to break this example into smaller pieces, with each one focus on specific tasks.

@Jinkxed
Copy link
Author

Jinkxed commented Feb 25, 2019

Added in some commenting and removed dependencies.

@Jinkxed
Copy link
Author

Jinkxed commented Mar 8, 2019

@M00nF1sh Anything else you want me to cover here?

@dennisotugo
Copy link

@M00nF1sh
@bigkraig

kind: Deployment
name: web-external
minReplicas: 1
maxReplicas: 1
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why HPA with min 1 max 1? it will recreate the pod if it reaches 50% cpu?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To reduce the resources required to demo, absolutely could be 1min 2 max

@fejta-bot
Copy link

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

@k8s-ci-robot k8s-ci-robot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Jul 30, 2019
@fejta-bot
Copy link

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten

@k8s-ci-robot k8s-ci-robot added lifecycle/rotten Denotes an issue or PR that has aged beyond stale and will be auto-closed. and removed lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. labels Aug 29, 2019
@dennisotugo
Copy link

/remove-lifecycle rotten

@k8s-ci-robot k8s-ci-robot removed the lifecycle/rotten Denotes an issue or PR that has aged beyond stale and will be auto-closed. label Aug 30, 2019
@dennisotugo
Copy link

/remove-lifecycle stale

@dennisotugo
Copy link

/retest

@fejta-bot
Copy link

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

@k8s-ci-robot k8s-ci-robot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Nov 28, 2019
@M00nF1sh M00nF1sh closed this Dec 1, 2019
M00nF1sh added a commit that referenced this pull request Oct 11, 2024
* Feature: Deferred TGB queue for no-op reconciles

* account for pods that go unready and revive themself

* improve logging

* preempt pod readiness gate changes by clearing check point

* cut v2.9.1 release

---------

Co-authored-by: Zachary Nixon <[email protected]>
Co-authored-by: Kubernetes Prow Robot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants