Ingress on ports 80/443 for cluster

[GuillaumeL30]

Hi there,

So far so good with your docs :
- I created a cluster, added a node, deployed a Dashboard, a (secured) Helm/Tiller and an Ingress.
- I bought a nice .ovh domain that points to my NODES_URL.
- I deployed you hello app and made it available on http://hello.DOMAIN.ovh:32080

As for now I'd like to issue an HTTPS certificate with (deployed easily with helm chart). So I :
- deployed cert-manager with helm chart
- created a "letsencrypt-staging" ClusterIssuer
- added a Certificate for hello.DOMAIN.ovh
- modified my Ingress to includes this Certificate

But As Ingress is using 32080/32443, I'm having some troubles with ACME validation giving me :

http-01 self check failed for domain "hello.DOMAIN.ovh"

But Ingress does not allow a setup on NodePort with ports under 3000.

What am I doing wrong ? should I use another mode for Ingress ? Which ?

Thanks for your help !

[GuillaumeL30]

Some news, I found a way to reach a bit further my goal.

Instead of deploying Ingress by the Helm chart, I re-deployed it manually :

kubectl apply -f https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/mandatory.yaml

Then for last step I edited the service-nodeport.yaml by adding the ips of my nodes :

curl https://raw.githubusercontent.com/kubernetes/ingress-nginx/master/deploy/provider/baremetal/service-nodeport.yaml -o service-nodeport.yaml
kubectl get -o jsonpath='{.status.addresses[?(@.type=="InternalIP")].address}' $(kubectl get nodes -o name)

Add to service-nodeport.yaml :

externalIPs:
- X.X.X.X
- X.X.X.X

Then :

kubectl apply -f service-nodeport.yaml

It worked and the Ingress listens on all my nodes on 80 and 433 now.
But I think this way may not be the cleanest one ... Any advice/remark ?

Thanks,

[ThomasS6]

Until LB is released, port 80/443 are reachable by this way, thanks @GuillaumeL30