emilevauge
Joined 11 years ago
Karma
290
Submissions
39
Member since
May 29
Recent submissions
Comment · 11 months ago
We have been building an ingress Nginx compatibility layer in Traefik that supports the most used ingress Nginx annotations. You should definitely give it a try as it makes Traefik a drop-in replacement to ingress Nginx, without touching your existing ingress resources.
Your feedback will be super useful to make it better
https://traefik.io/blog/transition-from-ingress-nginx-to-tra...
Comment · 11 months ago
We have been building an ingress Nginx compatibility layer in Traefik that supports the most used ingress Nginx annotations. You should definitely give it a try as it makes Traefik a drop-in replacement to ingress Nginx, without touching your existing ingress resources.
Your feedback will be super useful to make it better
https://doc.traefik.io/traefik/master/reference/routing-conf...
Comment · 6 years ago
Indeed, go plugins were our initial choice (https://github.com/traefik/traefik/pull/1865). But you said everything about how bad/impossible the workflow would have been for users.
Building from scratch a go interpreter was not the easiest way, but this was the best solution regarding the UX.
Comment · 6 years ago
This security issue is not that simple to manage as you probably know. It's mainly due to the fact that there is now way to have authorization on the the docker API. This is not the case on Kubernetes for example where you have RBAC to prevent this kind of issue. We have described this in detail in our documentation, and you have many solutions/workarounds to address this: https://doc.traefik.io/traefik/providers/docker/#docker-api-...
Comment · 7 years ago
We think that it is interesting to have an alternative with a simpler design bringing almost all features. So yes, mTLS between pods is not supported. But it's a decent tradeoff for many users. Finally, mTLS could be supported in the future between nodes :)
Comment · 7 years ago
Whæt's wröng?
Comment · 7 years ago
Thanks! We deeply believe that the best infrastructure products are open and free from vendor lock-in.
Being compliant to SMI will make both Maesh and the specifications stronger.
[ my public key: https://keybase.io/emilevauge; my proof: https://keybase.io/emilevauge/sigs/UFCRdVUwDTmdUwilbRqqTp9f_t949Zz8IwBT18bcFDQ ]