0

I have an EKS cluster that I upgraded to 1.23. The cluster was working prior to the upgrade. I am using an ELB loadbalancer which points to an nginx-ingress controller. The ingress-controller I had to rebuild it I have looked cant seem to find what setting I missing. https is working for the landing page, but as soon as I attempt to login to my app, I get redirected to an http site. In another app since I explicitly have http turned off on that site, I get page isn't redirecting properly. I have changed the force ssl and ssl settings to true/false and no effect. Any suggestions?

my ingress annotations are:

Annotations:                                                    nginx.ingress.kubernetes.io/force-ssl-redirect: false
                                                                nginx.ingress.kubernetes.io/proxy-body-size: 100m
                                                                nginx.ingress.kubernetes.io/proxy-connect-timeout: 600
                                                                nginx.ingress.kubernetes.io/proxy-read-timeout: 600
                                                                nginx.ingress.kubernetes.io/proxy-send-timeout: 600
                                                                nginx.ingress.kubernetes.io/redirect-to-https: true
                                                                nginx.ingress.kubernetes.io/ssl-passthrough: true
                                                                nginx.ingress.kubernetes.io/use-regex: true 

These are the ingress container args on the deployment:

  Containers:
   nginx-ingress-nginx-ingress:
    Image:       nginx/nginx-ingress:2.4.2
    Ports:       80/TCP, 443/TCP, 9113/TCP, 8081/TCP
    Host Ports:  0/TCP, 0/TCP, 0/TCP, 0/TCP
    Args:
      -nginx-plus=false
      -nginx-reload-timeout=60000
      -enable-app-protect=false
      -enable-app-protect-dos=false
      -nginx-configmaps=$(POD_NAMESPACE)/nginx-ingress-nginx-ingress
      -default-server-tls-secret=$(POD_NAMESPACE)/nginx-ingress-nginx-ingress-default-server-tls
      -ingress-class=nginx
      -health-status=false
      -health-status-uri=/nginx-health
      -nginx-debug=true
      -v=1
      -nginx-status=true
      -nginx-status-port=8080
      -nginx-status-allow-cidrs=127.0.0.1
      -report-ingress-status
      -external-service=nginx-ingress-nginx-ingress
      -enable-leader-election=true
      -leader-election-lock-name=nginx-ingress-nginx-ingress-leader-election
      -enable-prometheus-metrics=true
      -prometheus-metrics-listen-port=9113
      -prometheus-tls-secret=
      -enable-custom-resources=true
      -enable-snippets=false
      -include-year=false
      -disable-ipv6=false
      -enable-tls-passthrough=true
      -enable-preview-policies=false
      -enable-cert-manager=false
      -enable-oidc=false
      -enable-external-dns=false
      -ready-status=true
      -ready-status-port=8081
      -enable-latency-metrics=false

This is the configmap the deployment is using:

apiVersion: v1
data:
  enable-underscores-in-headers: "true"
  force-ssl-redirect: "true"
  keep-alive: "600"
  ssl-redirect: "false"
  upstream-keepalive-timeout: "600"
  use-forwarded-headers: "true"
kind: ConfigMap
metadata:
  annotations:
    meta.helm.sh/release-name: nginx-ingress
    meta.helm.sh/release-namespace: default
  creationTimestamp: "2022-12-16T18:06:49Z"
  labels:
    app.kubernetes.io/instance: nginx-ingress
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: nginx-ingress-nginx-ingress
    helm.sh/chart: nginx-ingress-0.15.2
  name: nginx-ingress-nginx-ingress
  namespace: default
  resourceVersion: "243438295"
zerobit
  • 1
  • 1

0 Answers0