Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deploying ingress controller on eks fargate (private cluster) #7006

Closed
jainhitesh9998 opened this issue Mar 31, 2021 · 6 comments
Closed

Deploying ingress controller on eks fargate (private cluster) #7006

jainhitesh9998 opened this issue Mar 31, 2021 · 6 comments
Labels
kind/support Categorizes issue or PR as a support question.

Comments

@jainhitesh9998
Copy link

nginx ingress deploys very easily on eks managed node cluster, but while deploying on a private fargate cluster i'm getting the following error i deployed the nginx ingress controller in fargate with AllowPriviligeEscalation as False.

nginx: the configuration file /tmp/nginx-cfg370196987 syntax is ok
2021/03/31 12:06:40 [emerg] 71#71: bind() to 0.0.0.0:80 failed (13: Permission denied)
nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)
nginx: configuration file /tmp/nginx-cfg370196987 test failed ```

 Any inputs on deploying ingress controller(nginx or any) on a private fargate cluster
@jainhitesh9998 jainhitesh9998 added the kind/support Categorizes issue or PR as a support question. label Mar 31, 2021
@TBBle
Copy link

TBBle commented Mar 31, 2021

Answered this at #4888 (comment)

@jainhitesh9998
Copy link
Author

So Basically Ingress Controller won't work on fargate with all feature set

@TBBle
Copy link

TBBle commented Apr 1, 2021

Yeah, on Fargate you won't be able to use the TCP/UDP forwarding feature for ports below 1024. All other features (i.e. http/https on any port, and TCP/UDP forwarding on ports above 1024) should work with AllowPriviligeEscalation set to false, and appropriate other configuration changes.

@TBBle
Copy link

TBBle commented Apr 1, 2021

That said, I'm not sure why you'd use Ingress for TCP/UDP forwarding, if you're on AWS, you can use NLB-IP with Fargate for exposing TCP/UDP services from your cluster instead.

@rikatz
Copy link
Contributor

rikatz commented Apr 3, 2021

As this is answered I’ll close the issue ;)

@TBBle thanks for your help on this!
/close

@k8s-ci-robot
Copy link
Contributor

@rikatz: Closing this issue.

In response to this:

As this is answered I’ll close the issue ;)

@TBBle thanks for your help on this!
/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/support Categorizes issue or PR as a support question.
Projects
None yet
Development

No branches or pull requests

4 participants