You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/nginx/deployment-guides/amazon-web-services/ingress-controller-elastic-kubernetes-services.md
+22-21Lines changed: 22 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,9 +10,9 @@ toc: true
10
10
weight: 400
11
11
---
12
12
13
-
This guide explains how to use NGINX Open Source or F5 NGINX Plus Ingress Controller for Amazon Elastic Kubernetes Services (EKS).
13
+
This guide explains how to use NGINX or F5 NGINX Plus with NGINX Ingress Controller for Amazon Elastic Kubernetes Services (EKS).
14
14
15
-
**Note:**These instructions apply to both the NGINX and NGINX Plus Ingress Controllers for Kubernetes. For ease of reading, the document refers to NGINX Plus only.
15
+
{{< note >}} These instructions apply to NGINX Ingress Controller with NGINX or NGINX Plus. For ease of reading, the document refers to NGINX Plus only. {{< /note >}}
16
16
17
17
18
18
<spanid="prereqs"></span>
@@ -23,13 +23,13 @@ This guide explains how to use NGINX Open Source or F5 NGINX Plus Ingress Contro
23
23
- For NGINX Open Source you can use the pre-built image [on DockerHub](https://hub.docker.com/r/nginx/nginx-ingress/). You can also build your own image.
24
24
- For NGINX Plus, you must build an image.
25
25
26
-
**Note:**If you build the image, do not push it to a public registry. Run the <spanstyle="white-space: nowrap;">`make``container`</span> command below.
26
+
{{< note >}} If you build the image, do not push it to a public registry. Run the `makecontainer` command below. {{< /note >}}
27
27
28
28
```shell
29
29
make container DOCKERFILE=DockerfileForPlus PREFIX=nginx/nginx-plus-ingress
30
30
```
31
31
32
-
The `PREFIX` argument specifies the repo name in your private container registry. In this example, we set it to <spanstyle="white-space: nowrap; font-weight:bold;">nginx/nginx-plus-ingress</span>. You can later use that name to reference the image instead of its numerical ID.
32
+
The `PREFIX` argument specifies the repo name in your private container registry. In this example, we set it to `nginx/nginx-plus-ingress`. You can later use that name to reference the image instead of its numerical ID.
33
33
34
34
35
35
<spanid="amazon-eks"></span>
@@ -52,21 +52,21 @@ This step is only required if you do not plan to use the prebuilt NGINX Open Sou
52
52
53
53
1. Use the [AWS documentation](https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-create.html) to create a repository in the Amazon Elastic Container Registry (ECR). In Step 4 of the AWS instructions, name the repository <spanstyle="white-space: nowrap; font-weight:bold;">nginx-plus-ic</span> as that is what we use in this guide.
54
54
55
-
2. Run the following AWS CLI command. It generates an auth token for your AWS ECR registry and pipes it into the <spanstyle="white-space: nowrap;">`docker``login`</span> command. This lets AWS ECR authenticate and authorize the upcoming Docker requests. For details about the command, see the [AWS documentation](https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry_auth.html).
55
+
2. Run the following AWS CLI command. It generates an auth token for your AWS ECR registry, then pipes it into the `dockerlogin` command. This lets AWS ECR authenticate and authorize the upcoming Docker requests. For details about the command, see the [AWS documentation](https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry_auth.html).
-`<aws_region_code>` is the same region name you specified in Step 2 above.
61
61
-`<aws_account_id>` is your AWS account number. For instructions on retrieving the ID, see the [AWS documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/console_account-alias.html).
62
62
63
-
3. Run the following command to apply the tag `edge` to your NGINX Plus Ingress Controller image:
63
+
3. Run the following command to apply the tag `edge` to your NGINX Ingress Controller image:
64
64
65
65
```shell
66
66
docker tag <registry/image>:edge <aws_account_id>.dkr.ecr.<aws-region-code>.amazonaws.com/<ecr_repo>:edge
67
67
```
68
-
-`<registry/image>` is the repo name you set with the `PREFIX` parameter to the <spanstyle="white-space: nowrap;">`make``container`</span> command (see [Prerequisites](#prereqs)). In this guide it is <spanstyle="white-space: nowrap;">`nginx/nginx-plus-ingress`</span>.
69
-
-`<ecr_repo>` is the AWS ECR repository you created in Step 1 above. In this guide it is called <spanstyle="white-space: nowrap;">`nginx-plus-ic`</span>.
68
+
-`<registry/image>` is the repo name you set with the `PREFIX` parameter to the `makecontainer` command (see [Prerequisites](#prereqs)). In this guide it is `nginx/nginx-plus-ingress`.
69
+
-`<ecr_repo>` is the AWS ECR repository you created in Step 1 above. In this guide it is called `nginx-plus-ic`.
70
70
71
71
The final command is:
72
72
@@ -85,28 +85,29 @@ This step is only required if you do not plan to use the prebuilt NGINX Open Sou
85
85
86
86
Use [our documentation](https://docs.nginx.com/nginx-ingress-controller/installation/installation-with-manifests/) to install the NGINX Plus Ingress Controller in your Amazon EKS cluster.
87
87
88
-
Complete the steps up to and including [Confirm NGINX Ingress Controller is running](https://docs.nginx.com/nginx-ingress-controller/installation/installing-nic/installation-with-manifests/#confirm-nginx-ingress-controller-is-running). Next, follow the instructions below to create a Network Load Balancer to route traffic to the NGINX Plus Ingress Controller.
88
+
Complete the steps up to and including [Confirm NGINX Ingress Controller is running](https://docs.nginx.com/nginx-ingress-controller/installation/installing-nic/installation-with-manifests/#confirm-nginx-ingress-controller-is-running). Next, follow the instructions below to create a Network Load Balancer to route traffic to NGINX Plus Ingress Controller.
89
89
90
-
<spanid="nlb"></span>
91
-
## Using a Network Load Balancer in Front of the NGINX Plus Ingress Controller
90
+
---
91
+
92
+
## Use a Network Load Balancer in front of NGINX Ingress Controller
92
93
93
-
We assume you've cloned the [kubernetes-ingress](https://github.com/nginx/kubernetes-ingress) repository in the previous step.
94
+
These steps assume you've cloned the [kubernetes-ingress](https://github.com/nginx/kubernetes-ingress) repository in the previous step.
94
95
95
-
We need a Kubernetes `LoadBalancer` service to route traffic to the NGINX Plus Ingress Controller. By default, Amazon EKS will create a [Classic Load Balancer](https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/introduction.html) for Kubernetes services of type `LoadBalancer`. However, we recommend that you create a [Network Load Balancer](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/introduction.html) (NLB). It operates at the transport layer and is optimized for high performance and low latency.
96
+
You need a Kubernetes `LoadBalancer` service to route traffic to the NGINX Ingress Controller. By default, Amazon EKS will create a [Classic Load Balancer](https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/introduction.html) for Kubernetes services of type `LoadBalancer`. However, we recommend that you create a [Network Load Balancer](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/introduction.html) (NLB). It operates at the transport layer and is optimized for high performance and low latency.
96
97
97
98
We also recommend enabling the PROXY Protocol for both the NGINX Plus Ingress Controller and your NLB target groups. This is used to forward client connection information. If you choose not to enable the PROXY protocol, see the [Appendix](#appendix).
98
99
99
100
### Configuring a `LoadBalancer` Service to Use NLB
100
101
101
-
Apply the manifest <spanstyle="white-space: nowrap; font-weight:bold;">deployments/service/loadbalancer-aws-elb.yaml</span> to create a `LoadBalancer` of type NLB:
102
+
Apply the manifest `deployments/service/loadbalancer-aws-elb.yaml` to create a `LoadBalancer` of type NLB:
3. Follow the [instructions](https://github.com/nginx/kubernetes-ingress/tree/main/examples/ingress-resources/complete-example) to deploy our Cafe demo app into the EKS cluster. It will be load balanced by your NGINX Plus Ingress Controller.
142
+
3. Follow the [instructions](https://github.com/nginx/kubernetes-ingress/tree/main/examples/ingress-resources/complete-example) to deploy the Cafe demo app into the EKS cluster. It will be load balanced by NGINX Ingress Controller.
142
143
* In Step 1 of deploying the demo app, save the public IP address into the `IC_IP` shell variable. Set `IC_HTTPS_PORT` to 443.
143
-
* The `kubectl` commands are relative to the <spanstyle="white-space: nowrap; font-weight:bold;">deployment/examples/ingress-resources/complete-example</span> directory of the [kubernetes-ingress](https://github.com/nginx/kubernetes-ingress) repository.
144
+
* The `kubectl` commands are relative to the `deployment/examples/ingress-resources/complete-example` directory of the [kubernetes-ingress](https://github.com/nginx/kubernetes-ingress) repository.
144
145
* Run the `curl` command listed in the instructions. It will access the demo app and populate the NGINX Plus Ingress Controller logs.
145
146
146
147
4. Run the following commands to check if the PROXY Protocol is enabled:
147
-
1. Display the name of the running pod of the NGINX Plus Ingress Controller:
148
+
1. Display the pod of NGINX Ingress Controller:
148
149
149
150
```shell
150
151
kubectl get pods -n nginx-ingress
151
152
```
152
-
2. Display the logs from the NGINX Plus Ingress Controller. Replace `<pod_name>` with the name from the previous step. If the logged IP address matches the one you used to access the demo app, then the PROXY Protocol is enabled.
153
+
2. Display the logs from NGINX Ingress Controller. Replace `<pod_name>` with the name from the previous step. If the logged IP address matches the one you used to access the demo app, then the PROXY Protocol is enabled.
153
154
154
155
```shell
155
156
kubectl logs <pod_name> -n nginx-ingress
@@ -163,7 +164,7 @@ If you want to disable the PROXY Protocol, perform these steps.
163
164
164
165
1. Disable the PROXY Protocol forthe target groups linked to the NLB. Undo the stepsin the **Enable proxy protocol** section of the [AWS documentation](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/edit-target-group-attributes.html#proxy-protocol).
165
166
166
-
2. Remove the following keys from <span style="white-space: nowrap; font-weight:bold;">deployments/common/nginx-config.yaml</span> the config map file:
167
+
2. Remove the following keys from `deployments/common/nginx-config.yaml` the config map file:
167
168
168
169
```yaml
169
170
proxy-protocol: "True"
@@ -177,7 +178,7 @@ If you want to disable the PROXY Protocol, perform these steps.
3. In the <span style="white-space: nowrap; font-weight:bold;">deployments/service/loadbalancer-aws-elb.yaml</span> service file, add the `externalTrafficPolicy` key in the `spec` section. Set it to `Local`, as in this example:
181
+
3. In the `deployments/service/loadbalancer-aws-elb.yaml` service file, add the `externalTrafficPolicy` key in the `spec` section. Set it to `Local`, as in this example:
0 commit comments