question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Watch ambassador-certs and ambassador-cacert secrets to avoid need to restart Ambassador

See original GitHub issue

When setting up TLS termination following https://www.getambassador.io/user-guide/tls-termination, it took me a while to realize that I needed to restart Ambassador for it to detect the ambassador-certs secret I had created. The same way ambassador/kubewatch.py watches services for annotation changes, it could watch the ambassador-certs secret (and the ambassador-cacert secret while we’re at it).

The watch loops would run concurrently. The official Kubernetes client isn’t asyncio-friendly at the moment https://github.com/kubernetes-client/python/issues?utf8=✓&q=asyncio, but concurrent.futures with threads or raw threading would do the trick. If time allows, this multi-watch logic could be implemented upstream in the Kubernetes client: https://github.com/kubernetes-client/python/issues/30

In the meantime, a bold warning in the documentation would be helpful.

Issue Analytics

  • State:closed
  • Created 5 years ago
  • Reactions:3
  • Comments:5 (4 by maintainers)

github_iconTop GitHub Comments

7reactions
concafcommented, Jun 27, 2018

@KowalczykBartek volunteered to work on this earlier today 🎉

4reactions
kflynncommented, Jan 29, 2019

Done in RC6.

Read more comments on GitHub >

github_iconTop Results From Across the Web

TLS failure: `routines:CONNECT_CR_SRVR_HELLO:wrong ...
I've tried restarting the Ambassador service in order to encourage it to pick up on the new certificate, but no matter what I...
Read more >
TLS termination and enabling HTTPS | Edge Stack
Ambassador Edge Stack dynamically loads TLS certificates by reading them from Kubernetes secrets. Use kubectl to create a tls secret to hold the...
Read more >
datawire/ambassador - Gitter
Hi People, my GKE K8S version 1.19 which runs ambassador docker image 1.13 starting show the logs with this message: pod-1 -> Failed...
Read more >
Kubernetes Tutorial: How to Manage TLS Certificates ... - Auth0
Learn how to leverage Ambassador to secure apps running in your Kubernetes clusters with TLS certificates for free.
Read more >
https://raw.githubusercontent.com/datawire/ambassa...
The core of Ambassador Edge Stack is Emissary-ingress. ... Change: Emissary-ingress will now watch for ConfigMap or Secret resources specified by the ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found