Using nginx this way is a kubernetes anti-pattern

[onedr0p]

The proper was to get outside access to your cluster apps is to use an ingress controller like ingress-nginx and define ingress resources per application. For SSL the proper way to add certificates is to use cert-manager.

Once cert-manager is configured with the dns01 challenge you can put a common annotation on the ingresses to request, apply and use SSL certificates.

[aleksasiriski]

+1, maybe even consider switching to cloudnative solutions like Traefik CE with cert-manager.

Also @KyleTryon consider switching to @onedr0p container images (:

[onedr0p]

Probably another issue for tracking but feel free to read my mission statement on the containers I build:

https://github.com/onedr0p/containers#mission-statement

[gmemstr]

@aleksasiriski I'm curious about the traefik recommendation - any particular reason to use it over nginx? Since most of the config is abstracted away by the ingress config anyways.

[onedr0p]

Personally I would not use Traefik as an ingress controller in k8s and instead use ingress-nginx.

See my comments here:
https://old.reddit.com/r/kubernetes/comments/137u79r/ingress_controller_for_vanilla_k8s/jiy8r89/

[aleksasiriski]

@aleksasiriski I'm curious about the traefik recommendation - any particular reason to use it over nginx? Since most of the config is abstracted away by the ingress config anyways.

Personal preference, but go with either one. Some of the statements onedr0p mentions I can agree with but other not so much. So, again, it's personal preference for me but both are fine.

[onedr0p]

The author of this project is aware of this now and is up to them to wether or not to update their project, closing...