Ingress - Feat. Contour, NGINX Ingress, and Emissary-ingress (You Choose!, Ch. 2, Ep. 3)
Source: YouTube · DevOps & AI Toolkit · published Aug 2, 2023 · 1:09:26
This episode of a CNCF landscape series implements the community-chosen GitOps tool Argo CD and compares three Ingress solutions—Emissary, NGINX Ingress, and Contour—to address the limitations of the native Kubernetes Ingress object 0:15, 7:03.
Key Takeaways:
• The hosts install Argo CD using Helm and configure it to manage applications like SchemaHero and SeachManager, establishing a GitOps workflow that moves away from direct CLI commands 8:14.
• Native Kubernetes Ingress is discussed as having significant shortcomings, such as a lack of status information and advanced routing features, which has led to a fragmented ecosystem of over 30 projects 16:03.
• Emissary Ingress, powered by Envoy, is presented as an API Gateway that simplifies configuration through CRDs like "Mappings" and supports advanced features like self-service routing and TLS 26:40.
• NGINX Ingress Controller relies on the mature NGINX proxy for high performance and uses annotations for configuration, with current efforts focused on adopting newer NGINX versions and Gateway API support 31:38.
• Contour utilizes Envoy as a data plane and offers the HTTPProxy CRD to provide structured configuration and better status reporting, alongside support for the Gateway API specification 35:44.
The episode concludes with a Q&A where maintainers discuss TCP/UDP support and agree that while "Ingress Controller" is the clearest current terminology, Gateway API represents the future standardization 41:23.
Sources:
- 0:15 In
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hello it's us again it's us again what have you done what I was expecting something exciting and you got us welcome everyone to you choose a Choose Your Own Adventure style show where we're navigating our way through the entire entire cncf landscape so uh we're in chapter two right now what does that mean that's very enthusiastic when you say entire kind of like that entire yeah I mean projects are coming faster than we are covering them so security exactly so uh by by so we're in chapter two and at the end of chapter one we had our application running in a development environment attached to backing services or it could be natively developed further in kubernetes and now we're getting our application from there um to a production environment where it's managed with get Ops we also made a …