Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
  • 15:52
    mattmcclure-dw synchronize #3088
  • 15:52

    mattmcclure-dw on ext-filter-doc-master

    Update basic-auth.md fix link … (compare)

  • 15:51

    mattmcclure-dw on ext-filter-doc-1.9

    Update basic-auth.md fix link … (compare)

  • 15:51
    mattmcclure-dw synchronize #3087
  • 15:13

    mattmcclure-dw on ext-filter-doc-master

    Update ext-filters.md fix spec… (compare)

  • 15:13
    mattmcclure-dw synchronize #3088
  • 15:13

    mattmcclure-dw on ext-filter-doc-1.9

    Update ext-filters.md (compare)

  • 15:13
    mattmcclure-dw synchronize #3087
  • 14:53

    mattmcclure-dw on ext-filter-doc-1.9

    Update ext-filters.md fix spec… (compare)

  • 14:53
    mattmcclure-dw synchronize #3087
  • 11:10
    btrx-rkazi commented #1437
  • 03:36
    stale[bot] unlabeled #1743
  • 03:36
    ovk commented #1743
  • 03:35
    stale[bot] labeled #1743
  • 03:35
    stale[bot] commented #1743
  • Nov 21 08:17
    LukeShu edited #3089
  • Nov 21 08:16
    LukeShu opened #3089
  • Nov 21 08:04

    LukeShu on dstuff

    (from AES) Selected `goimports`… (from AES) tree-wide: Switch to… (compare)

  • Nov 21 06:42
    stale[bot] labeled #2831
  • Nov 21 06:42
    stale[bot] labeled #2956
datawirebot
@datawirebot
<flynn> @entone Ah cool. Happy to take a PR for this, of course! 🙂
<cory> for what its worth we have mappings with case_sensitive: False and they appear to work correctly
<entone> with a host_redirect?
<cory> no, without host_redirect
<cory> just noting that the feature doesn’t appear to be completely broken, so that might very well the cause
<entone> the function to generate the config needs some love in general, seems almost impossible to unit test it at this point
<entone> @flynn I'll see what I can do this week, but my Python ins't what it used to be, maybe it'll come flooding back once I'm in there 🙂
datawirebot
@datawirebot
<flynn> @entone It’s sadly complex, yes, especially given interdependencies between Mapping and other things. What I tend to do is to make shell, then use ambassador dump --ir --v2 $configdir > wtf.json — that way, the Ambassador IR and V2 Envoy config end up in wtf.json, and you can start by looking at that.
<flynn> (where $configdir is a directory with one or more Ambassador config resources — or if they’re annotated K8s resources, add the --k8s flag as well)
datawirebot
@datawirebot
<entone> awesome, thanks for the tip
datawirebot
@datawirebot

<Craig> Quick question on Cert-Manager integration with Ambassador. I setup my cert-manager and it is using lets-encrypt. Seems to work fine and I got a cert that will renew in 3 month(ish).

https://www.getambassador.io/user-guide/cert-manager

Do I need to keep that challenge service (acme-challenge-service) mapped for renewal or can I close it and renewal will still happen?

Eric Fulton
@Sahasrara
Hey there, quick question:
I was under the impression that service_port was used to dictate which port envoy listens on its public ip. That doesn't seem to be the case since as a non-root user, the ingress controller is listening on 80.
Even though its set to 8080 by default (and explicitly in my case)
Sharath MK
@Sharathmk99
Hi Team, I'm new to ambassador. Is it possible to integrate 3rd party IDP, if it's success then only route to internal service?
Daniel Barrigas
@danielguedesb
Hey guys, using ambassador 0.61.0 behind a gcp https lb and set up the redirect from http to https. However, for some reason, it enters a loop and keeps redirecting until it reaches a pre-defined limit.
  service_port: 8080
  x_forwarded_proto_redirect: true
  use_remote_address: false
This is the configuration on the k8s ambassador service, according to the docs it should work. Anything I might be missing here? Thanks
Hugo Barrigas
@hfgbarrigas
having the same issue as @danielguedesb , though version 0.40.0 works just fine
haozong
@dotw
@richarddli Hi, how to configure authentication for a specific ambassador instance if I have more than one instance in cluster?
I can't find any tips in the doc
Baily Troyer
@BailyTroyer
Is there better documentation to get up-and-running with ambasssador canary releases? Running the examples provided here simply don't work. https://blog.getambassador.io/canary-deployments-a-b-testing-and-microservices-with-ambassador-f104d0458736 & https://www.getambassador.io/docs/dev-guide/canary-release-concepts/
Saket Kashyap
@saketkashyap
Hi there, I followed the article - https://blog.getambassador.io/deploying-java-apps-with-kubernetes-and-the-ambassador-api-gateway-c6e9d9618f1b to deploy ambassador as LoadBalancer on Kubernetes cluster running on Docker-For-Desktop on windows 10.
I deployed my app, created a service of my app, exposed the service on nodeport to test the service, then configured it to cluster ip, deployed an ambassador service with mapping and then applied the https://getambassador.io/yaml/ambassador/ambassador-no-rbac.yaml
but , when i try to hit on localhost, the browser shows connection rest
can any one help?
Saket Kashyap
@saketkashyap
was able to resolve the issue
had an issue with targetPort in ambassador service
zhaohb
@zhaohb
now I met a problem datawire/ambassador#1761
can any one help ?
muralidigi
@muralidigi
Greetings!
muralidigi
@muralidigi
I followed the tutorial https://blog.getambassador.io/deploying-java-apps-with-kubernetes-and-the-ambassador-api-gateway-c6e9d9618f1b on Mac (using Edge of Docker for Mac). This is to deploy ambassador as LoadBalancer on Kubernetes on Mac.
kubectl get svc
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
ambassador LoadBalancer 10.109.246.200 localhost 80:32685/TCP 9m1s
kubernetes ClusterIP 10.96.0.1 <none> 443/TCP 139m
productcatalogue ClusterIP 10.101.120.246 <none> 8020/TCP 92m
shopfront ClusterIP 10.109.152.85 <none> 8010/TCP 92m
stockmanager ClusterIP 10.97.82.198 <none> 8030/TCP 92m
However, http://localhost/shopfront/ on the local browser (Firefox, Safari) Error out as Problem Loading Page.
Any Help would be much appreciated.
chris-fuselobby
@chris-fuselobby
hi. I'm facing this issue where ambassador pod is binding port 80 and gets permission denied error
[2020-02-18 09:44:46.653][000028][warning][config] [bazel-out/k8-dbg/bin/source/common/config/_virtual_includes/grpc_mux_subscription_lib/common/config/grpc_mux_subscription_impl.h:70] gRPC config for type.googleapis.com/envoy.api.v2.Listener rejected: Error adding/updating listener ambassador-listener-80: cannot bind '0.0.0.0:80': Permission denied
i saw the same error posted by someone but i failed to understand what port to change. i changed service_port and target_port to 8080 and faced the same error.
skadem07
@skadem07

hi, so the below mapping, unfortunately 301 will tell github to direct https://jenkins.foo.net , instead of going to bar-test.x.dev, can someone pls tell me how to achieve this mapping?

apiVersion: getambassador.io/v1 kind: Mapping metadata: name: android-jenkins namespace: test spec: ambassador_id: ambassador-1 prefix: /android-jenkins/ghprbhook/ host: bar-test.x.dev host_redirect: true path_redirect: /ghprbhook service: https://jenkins.foo.net method: POST

IC1101
@Nitinbabariya

Hi, any suggestion on how to upgrade an older version (0.76.0) of ambassador with latest one without causing any downtime in services?
I am trying to run these two versions in two different namespaces, but no success so far.

Any help would be much appreciated.

kamal prakash
@kamalpakashji_twitter
On linux ubuntu After doing all the steps to use ambassador api gateway mentioned in https://hackernoon.com/deploying-java-applications-with-kubernetes-and-an-api-gateway-fc471644bea7. command minikube service shopfront is working as desired but when I access shopfrom cia ambassador api gateway with localhost/shopfront then I get no resource found error . In ubuntu apache is already running on port 80. I have used all yaml files with no change. Loadbalancer is routing to port 80. what is possibly wrong
Kevin Summersill
@ksummersill2
I need some help. When I use a TLSContext it causes a 302 redirect to HTTP, is there a way to tell TLSContect to do a https redirect at all times?
So i figured it out. I needed to set up a WildCard Host that always direct traffic to https. :thumbsup:
3 replies
lazydevleo
@lazydevleo
when calling websocket through ambassador , it is not forwarding it for http upgrade
i added use_websockets:true
manasyadav
@manasyadav
Hey guys, I am following the gRPC greeter example on the Ambassador docs and I keep getting error 2: unknown. I have a simple greeter server on my Kubernetes. My greeter client can connect directly to the greeter service, no problem. However, when I use the Ambassador API gateway, it gives me that unknown error. Any hints as to why this could be happening? running out of ideas at this point.
murtuzamvista
@murtuzamvista
Hi Team, how do we enable gzip module on ambassador? is it service specific configs or a generic config at a higher level?
Vijay Kodam
@infinitebyte
Does Ambassador API GW support audit logs? There is no information about it in the documentation or on the website.
murtuzamvista
@murtuzamvista
Does ambassador version 1.2.2 supports prefix_regex option?
murtuzamvista
@murtuzamvista
Is there a documentation on prefix attribute max-length supported?