Skip to content

Instantly share code, notes, and snippets.

@Miciah

Miciah/ingress-diagrams.png

Last active May 14, 2020 02:10
Show Gist options
  • Save Miciah/02d13948a177c80c9941927ffb4b8ed0 to your computer and use it in GitHub Desktop.
Save Miciah/02d13948a177c80c9941927ffb4b8ed0 to your computer and use it in GitHub Desktop.
Download ZIP
ingress diagrams
Raw
ingress-diagrams.txt
Default configuration
+------------------------------------------------+ +---------------------------+
|cPNK OpenShift | |cBLU Platform |
| +----------------------------+ +----------+ | | +---------------------+ |
| |cGRE IngressController | |cGRE | | | |cGRE Public DNS zone | |
| | +<=-+ | | | | | |
| | name default | | +--|-|-->| ∗.apps.ext.foo.com | |
| | domain ∗.apps.ext.foo.com | | | | | | ∗.apps.int.foo.com | |
| | type: LoadBalancerService | | | | | | | |
| | scope External | | | | | | | |
| +----------------------------+ | Ingress | | | +---------------------+ |
| | operator | | | |
| +----------------------------+ | | | | +---------------------+ |
| |cGRE IngressController | | | | | |cGRE Private DNS zone| |
| | +<=-+ | | | | | |
| | name private | | +--|-|-->| ∗.apps.ext.foo.com | |
| | domain ∗.apps.int.foo.com | | | | | | ∗.apps.int.foo.com | |
| | type LoadBalancerService | | | | | | | |
| | scope Internal | | | | | | | |
| +----------------------------+ +--+-------+ | | +---------------------+ |
| | | | |
| +----------------------------+ | | | |
| |cGRE Service | | | | |
| | | | | | |
| | name router–default |<-----+ | | |
| | type LoadBalancer | | | | |
| | | | | | |
| +----------------------------+ | | | |
| | | | |
| +----------------------------+ | | | |
| |cGRE Service | | | | |
| | | | | | |
| | name router–default |<-----+ | | |
| | type LoadBalancer | | | |
| | | | | |
| +----------------------------+ | | |
+------------------------------------------------+ +---------------------------+
--------------------------------------------------------------------------------
Option #1
Delete the public zone configuration
+------------------------------------------------+ +---------------------------+
|cPNK OpenShift | |cBLU Platform |
| +----------------------------+ +----------+ | | +---------------------+ |
| |cGRE IngressController | |cGRE | | | |cRED Public DNS zone | |
| | +<=-+ | | | | | |
| | name default | | | | | | (must be configured | |
| | domain ∗.apps.ext.foo.com | | | | | | outside OpenShift) | |
| | type LoadBalancerService | | | | | | | |
| | scope External | | | | | | | |
| +----------------------------+ | Ingress | | | +---------------------+ |
| | operator | | | |
| +----------------------------+ | | | | +---------------------+ |
| |cGRE IngressController | | | | | |cGRE Private DNS zone| |
| | +<=-+ | | | | | |
| | name private | | +--|-|-->| ∗.apps.ext.foo.com | |
| | domain ∗.apps.int.foo.com: | | | | | | ∗.apps.int.foo.com | |
| | type LoadBalancerService | | | | | | | |
| | scope Internal | | | | | | | |
| +----------------------------+ +--+-------+ | | +---------------------+ |
| | | | |
| +----------------------------+ | | | |
| |cGRE Service | | | | |
| | | | | | |
| | name router–default |<-----+ | | |
| | type LoadBalancer | | | | |
| | | | | | |
| +----------------------------+ | | | |
| | | | |
| +----------------------------+ | | | |
| |cGRE Service | | | | |
| | | | | | |
| | name router–private |<-----+ | | |
| | type LoadBalancer | | | |
| | | | | |
| +----------------------------+ | | |
+------------------------------------------------+ +---------------------------+
--------------------------------------------------------------------------------
Option #2
Use the "Private" endpoint publishing strategy
and configure a LoadBalancer service manually
+------------------------------------------------+ +---------------------------+
|cPNK OpenShift | |cBLU Platform |
| +----------------------------+ +----------+ | | +---------------------+ |
| |cGRE IngressController | |cGRE | | | |cGRE Public DNS zone | |
| | +<=-+ +--|-|-->| | |
| | name default | | | | | | ∗.apps.ext.foo.com | |
| | domain ∗.apps.ext.foo.com | | | | | | | |
| | type LoadBalancerService | | | | | | | |
| | scope External | | | | | | | |
| +----------------------------+ | Ingress | | | +---------------------+ |
| | operator | | | |
| +----------------------------+ | | | | +---------------------+ |
| |cGRE IngressController | | | | | |cGRE Private DNS zone| |
| | +<=-+ | | | | | |
| | name private | | +--|-|-->| ∗.apps.ext.foo.com | |
| | domain ∗.apps.int.foo.com | | | | | | (internal address | |
| | type Private | | | | | | must be configured | |
| | scope Internal | | | | | | outside OpenShift) | |
| +----------------------------+ +--+-------+ | | +---------------------+ |
| | | | |
| +----------------------------+ | | | |
| |cGRE Service | | | | |
| | | | | | |
| | name router–default |<-----+ | | |
| | type LoadBalancer | | | |
| | | | | |
| +----------------------------+ | | |
| | | |
| +----------------------------+ | | |
| |cRED Service | | | |
| | | | | |
| | name router–private | | | |
| | type LoadBalancer | | | |
| | | | | |
| | (service must be configured| | | |
| | outside OpenShift) | | | |
| +----------------------------+ | | |
+------------------------------------------------+ +---------------------------+
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment