aks-ingress-controller

How to deploy nginx-ingress controller in a private Azure Kubernetes & Private ACR.

Pre-requisites

1. VNET with 2 subnets (Enable Service Endpoint)
2. Private Azure Container Registry (networking blade should be on Disabled) provisioned in the other repo: https://github.com/andyxuan2010/AIonK8sDemo
3. Private AKS with RBAC enabled (Attach AKS cluster to registry) provisioned in the other repo: https://github.com/andyxuan2010/AIonK8sDemo
4. Linux Jumpbox with Azure CLI, Docker, Helm (v 3.7.0), Kubernetes CLI installed, provisioned in the other repo: https://github.com/andyxuan2010/AIonK8sDemo

Getting Started

The environment can be provisioned either by terraform code or by script. Here is the steps to create the environment by scripts

1. Setup your infrastructure for your Private environment (refer to Create VM-steps)
2. Create Private Azure Container Registry (refer to createregistry-steps.sh)
3. Create Private AKS (refer to createaks-steps.sh) if by terraform, refer it to the other repo https://github.com/andyxuan2010/AIonK8sDemo which will provision all the required environment.

Installing Ingress Controller (Step-by-Step)

1. From Linux VM, authenticate with your registry and run az acr import to import all necessary images/repositories into the container registry (make sure you have Azure CLI, Docker, Helm (v 3.7.0), Kubernetes CLI installed )
2. Download desired package for ingress-nginx (Im using version 3.36.0)
3. Extract .tgz file and run helm push to acr (refer to manual.sh steps for commands)
4. Authenticate with your ACR and make sure helm pull runs successfully before running helm upgrade command
5. Create AKS namespace for ingress controller
6. Create internal-ingress.yaml file to create ingress controller and specify an ip that is not been used inside your vnet (use the internal-ingress.yaml inside ingress folder on this repo for reference)
7. Run helm upgrade (Refer to manual.sh for commands)
8. Run demo applications (aks-helloworld.yaml and ingress-demo.yaml) by running kubectl apply from linux vm
9. Run kubectl get validatingwebhookconfigurations and Delete it (kubectl delete validatingwebhookconfigurations nameoftheWebhook)
10. Create an ingress route (deploy hello-world-ingress.yaml)
11. Validate and test ingress controller by running the following:
    a. kubectl run -it --rm aks-ingress-test --image=mcr.microsoft.com/aks/fundamental/base-ubuntu:v0.0.11 -n yournamespace
    b. apt-get update && apt-get install -y curl
    c. curl -L http://youripgivenfortheinternalloadbalancer and curl -L -k http://yourip/hello-world-two
    d. You can also open a browser in a vm with access to this vnet and you should see your ingress working