Welcome to k8gb Discussions!

[ytsarev]

👋 Welcome!

We’re using Discussions as a place to connect with other members of k8gb community. We hope that you:

• Ask questions about k8gb
• Get help with k8gb
• Share ideas around k8gb
• Share your experience with k8gb

Let's build some great open-source GSLB stuff together 💪

[AlekseyGorodetsky]

Hello!
Thanks for the interesting solution!
But I have a question about some limitations that may be important in production.

Your CustomResourceDefinition Gslb can only create Ingress services that are proxy nodes, and in most cases accept protocols HTTP, HTTPS.
Maybe I didn’t find it, but in what way can I directly issue external IPs to services LoadBalancer of types, which can accept any protocols and without proxy nodes.

Let me know if this is possible now or in the future.
Thanks again for your solution.

[ytsarev]

Hey @AlekseyGorodetsky ,

Thanks a lot for you interest in k8gb and the great question.

We have relevant Issues in the backlog for a while

#147

and #954

but it still needs to be implemented.

I would be keen to learn about your use case more so we can possibly drive the implementation with the real user context.

Thanks,
Yury

[AlekseyGorodetsky]

Thanks for the quick response!

Your choice #147 is fine!
Service enabled spec might look like:

apiVersion: k8gb.absa.oss/v1beta1
kind: Gslb
metadata:
name: test-gslb
namespace: test-gslb
spec:
loadBalancer:
host: app1.cloud.example.com
serviceName: app # Service with type: LoadBalancer
strategy:
type: roundRobin

It's simple and logical!
Good luck in development!

I put a star on your chart on the site - https://artifacthub.io/packages/helm/k8gb/k8gb

[kkpatel]

In our clusters we typically use Traefik2 for our ingress controllers and consequently create IngressRoute resources. Though for some cases we still define Ingress resources. Can k8sgb be modified to also support Traefik IngressRoute resources?

[ytsarev]

Hi @kkpatel , to use some additional/special CRD we will need to adjust k8gb logic, theoretically possible in future.

During yesterday community meeting @kuritka presented the concept of k8gb-lite with ability to create addition CRD support. You can find the presentation here https://www.youtube.com/watch?v=KiWeMdlaIdo

[kkpatel]

Thanks for the quick response. Would K8gb work for a usecase where we had multiple ingress controllers on a single cluster? In our scenario, we have multiple ingress controllers per cluster, each servicing a subset of all the applications. Thanks in advance.

…

________________________________ From: Yury Tsarev ***@***.***> Sent: Thursday, June 29, 2023 10:56:59 AM To: k8gb-io/k8gb Cc: Patel, Kavita K.; Mention Subject: EXTERNAL: Re: [k8gb-io/k8gb] Welcome to k8gb Discussions! (Discussion #364) Hi @kkpatel<https://github.com/kkpatel> , to use some additional/special CRD we will need to adjust k8gb logic, theoretically possible in future. During yesterday community meeting @kuritka<https://github.com/kuritka> presented the concept of k8gb-lite with ability to create addition CRD support. You can find the presentation here https://www.youtube.com/watch?v=KiWeMdlaIdo — Reply to this email directly, view it on GitHub<#364 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABEYOYBQQVTUZXLDF6R46NTXNWJTXANCNFSM4ZEEKCUA>. You are receiving this because you were mentioned.Message ID: ***@***.***>

________________________________ This message is intended only for the use of the individual or entity to which it is addressed and may contain ZETA Associates confidential or proprietary information. If you are not the intended recipient, any use, dissemination, or distribution of this communication is prohibited. If you have received this communication in error, please notify the sender and delete all copies.

[ytsarev]

k8gb works with the Ingress object and is generally ingress controller agnostic, so I do not see architectural blockers for it to handle multpiple ingress controllers scenario. It requires some testing, though.

[kkpatel]

Hi Yury, Thanks again for the response. I have another question, is there a way to disable the K8gb controller from creating the DNSEndpoint objects based on an annotation in the Gslb CRD object? The reason being, we use traefik2 and though we generate Ingress objects, most of our applications create IngressRoute objects. We found a Kubernetes github project (https://github.com/borchero/switchboard) that can create DNSEndpoint objects from IngressRoute objects which looks appealing to us. Integrating this with the K8gb controller functionality would be great. Thanks again, Kavita Patel

…

________________________________ From: Yury Tsarev ***@***.***> Sent: Friday, June 30, 2023 10:31:17 AM To: k8gb-io/k8gb Cc: Patel, Kavita K.; Mention Subject: EXTERNAL: Re: [k8gb-io/k8gb] Welcome to k8gb Discussions! (Discussion #364) k8gb works with the Ingress object and is generally ingress controller agnostic, so I do not see architectural blockers for it to handle multpiple ingress controllers scenario. It requires some testing, though. — Reply to this email directly, view it on GitHub<#364 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ABEYOYGLXW5YTLSP7BNBG2DXN3PLLANCNFSM4ZEEKCUA>. You are receiving this because you were mentioned.Message ID: ***@***.***>

________________________________ This message is intended only for the use of the individual or entity to which it is addressed and may contain ZETA Associates confidential or proprietary information. If you are not the intended recipient, any use, dissemination, or distribution of this communication is prohibited. If you have received this communication in error, please notify the sender and delete all copies.

[ytsarev]

Hi Kavita,

Currently DNSEndpoint creation is part of the core logic and cannot be disabled. Feel free to create an issue with the possible flow and integration description you would like to see, we will be happy to evaluate the options here.

Cheers,
Yury

[hyoungdong-choi]

Hi,
We are currently using RKE, with our DNS handled by our own Bind9 server. We want to create an additional cluster to utilize K8GB across two clusters. I'm curious if ExternalDNS would function properly using Bind9 instead of Route53 or Infoblox

Thank you

[ytsarev]

Hi @hyoungdong-choi , thanks a lot for your interest in k8gb!

k8gb supports https://github.com/k8gb-io/k8gb/blob/master/docs/provider_rfc2136.md and our local reference deployment work with Bind9 so everything should work! Please also see associated helm chart values https://github.com/k8gb-io/k8gb/blob/master/chart/k8gb/values.yaml#L133

Cheers,
Yury

[hyoungdong-choi]

Thank you Yury.

I have more questions about k8gb helm install value about the section of externalDNS.
Is that section for Cloud DNS Service?
So basically i wanna ask if i need to use the section of Global, K8gb, CoreDNS, rfc2136 for the bind9 that i use DNS Server rn

Thanks again

[ytsarev]

If you follow https://www.k8gb.io/#quick-start , you will get a working local reference setup with the bind server :) Then, you can reuse the helm values from this working setup.

[hyoungdong-choi]

Thank you again :)
I check the files the set-up and files on the quick-start
On the bind9 Server zone file, the ip of nginx-ingress-controller was there but i thought the external IP of K8gb-coredns should be there
what is the right set up for it?
except that, i can make it :)

Thanks, again

[ytsarev]

What is getting configured for Zone delegation depends on the coredns exposure type.

Please check this code https://github.com/k8gb-io/k8gb/blob/master/controllers/providers/dns/external.go#L66-L73

	if p.config.CoreDNSExposed {
		NSServerIPs, err = p.assistant.CoreDNSExposedIPs()
	} else {
		NSServerIPs, err = p.assistant.GslbIngressExposedIPs(gslb)
	}
	if err != nil {
		return err
	}

If the coredns service is exposed aka is of type LoadBalancer https://github.com/k8gb-io/k8gb/blob/master/chart/k8gb/templates/deployment.yaml#L105-L108, then it's going to get the IP from CoreDNS Service.
Example configuration https://github.com/k8gb-io/k8gb/blob/master/docs/examples/route53/k8gb/k8gb-cluster-eu-west-1.yaml#L14

Otherwise, it will get the IPs from Ingress. The assumption in this case is that Ingress is using hostNetwork: true https://github.com/k8gb-io/k8gb/blob/master/deploy/ingress/nginx-ingress-values.yaml#L9 so effectively it is equal to k8s nodes IP addresses.

You can always check the construction of the resulting DnsEndpoint CR

 k get dnsendpoints.externaldns.k8s.io -n k8gb k8gb-ns-extdns -o yaml
apiVersion: externaldns.k8s.io/v1alpha1
kind: DNSEndpoint
metadata:
  annotations:
    k8gb.absa.oss/dnstype: extdns
  creationTimestamp: "2024-06-24T20:41:18Z"
  generation: 1
  name: k8gb-ns-extdns
  namespace: k8gb
  resourceVersion: "5136"
  uid: 3a5becdb-76bd-4760-8828-f0127ead77cb
spec:
  endpoints:
  - dnsName: cloud.example.com
    recordTTL: 5
    recordType: NS
    targets:
    - gslb-ns-eu-cloud.example.com
    - gslb-ns-us-cloud.example.com
  - dnsName: gslb-ns-us-cloud.example.com
    recordTTL: 5
    recordType: A
    targets:
    - 172.20.0.10
    - 172.20.0.11
status:
  observedGeneration: 1

Hope it helps! Please let me know if anything is unclear :)