3 ms·
A little of topic because it’s not a comparison : Recently had my first experience using gke ( and kubernetes in general), and although i managed to get somethi
by bsaul 8y ago
A little of topic because it’s not a comparison : Recently had my first experience using gke ( and kubernetes in general), and although i managed to get something working in the end i would say it’s still pretty rough...
Documentation is a mess : the general layout for google cloud is really a pain to read and navigate, but in addition to that you often have to jump between kubernetes doc and google doc, with some information being on both. Don’t do that please : either make it obvious that people need to get familiar with certain chapters of kube doc, or provide all the info ( me preference would actually go to the first option..)
It’s quite hard to guess what you can do on the gke web interface and what you can’t. You can feel it’s meant for people that really know kubernetes, and not people who discover both gke and kubernetes at the same time.
And for the life of me i couldn’t get the load balancer manage https. I’ve read this was possible, but never saw the actual page explaining how. I ended up using cloudfront but lost the ability to see end user ip in my logs in the process. ( also logging is a real beast to tame on its own, with no obvious way to know what is available by default, what is a paid option, what should be configured on the stackdriver website, and what should be coded )
- alpb 8y agoTLS with GKE with BYO cert isn't very clear I agree. It's basically in Kubernetes Ingress docs: https://kubernetes.io/docs/concepts/services-networking/ingress/#tls https://kubernetes.io/docs/concepts/services-networking/ingr... For GKE specific features, multiple-certs per Ingress explained here: https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-multi-ssl https://cloud.google.com/kubernetes-engine/docs/how-to/ingre..., and LetsEncrypt here: https://github.com/ahmetb/gke-letsencrypt https://github.com/ahmetb/gke-letsencrypt If you use GKE ingress, you can access end-user IP in X-Forwarded-For header.
- bsaul 8y agobut then does that mean you’ll need to manually log incoming ip from the header ? or is there a way to see them in the default logs of either the cluster or the load balancer ?