OpenShift Advanced Cluster Security - Ingress compatibility matrix
Updated -
This is a table of tested ingress controllers and how to configure them according to the network configuration.
| Load Balancer Type | Load Balancer Termination | Ingress Controller | Ingress Protocol | Ingress Termination | Central Protocol | Required Annotations |
|---|---|---|---|---|---|---|
| TCP | no | nginx | https/grpcs | yes | https/grpcs | nginx.ingress.kubernetes.io/backend-protocol: "GRPCS" |
| TCP | no | nginx | https/grpcs | yes | http/grpc | nginx.ingress.kubernetes.io/backend-protocol: "GRPC" *must configure central for http/grpc |
| TCP | no | nginx | https/grpcs | no | https/grpcs | nginx.ingress.kubernetes.io/ssl-passthrough: "true" nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" |
| TCP | no | traefik | https/grpcs | yes | https/grpcs | |
| TCP | no | traefik | https/grpcs | yes | http/grpc | *must configure central for http/grpc |
| TCP | no | istio-gw | https/grpcs | no | https/grpcs | Gateway req. spec.servers.tls.mode = PASSTHROUGH |
| TCP | no | istio-gw | https/grpcs | yes | http/grpc | Gateway req. spec.servers.tls.mode = SIMPLE |
| TCP | no | haproxy | https/grpcs | no | https/grpcs | ingress.kubernetes.io/ssl-passthrough: "true" |
Comments