IngressRoute: A Path Towards a Better Ingress Object for Kubernetes
summary
Contour introduces an IngressRoute CRD that replaces annotation-heavy Ingress YAML with a single-root-per-host model, explicit delegate subroutes for multi-tenant delegation, and per-route weighted backends so canaries like 90/10 traffic splits are trivial. It uses Envoy as the data plane and streams config via Envoy via gRPC to apply changes without restarts, supports TLS via cert-manager, and adds namespace scoping so admins keep certificates and host-wide settings secure while teams manage only their delegated paths.
AI-written summary · about
chapters (42)
- 0:00Introduction
- 0:24Ingress Controllers
- 1:23A Good Ingress Controller
- 2:00Use case is impossible
- 2:17Traffic consolidation
- 3:31TLS management
- 4:23Abstract configuration
- 5:11Half face traffic
- 5:59Contour
- 6:24Issues
- 6:42The specification
- 7:16Make this concrete
- 8:28Default Backend
- 10:14Virtual Host
- 10:52Default Route
- 11:50Multiple Ingress Objects
- 13:46Hirams Law
- 14:36Problems with Ingress
- 15:02Modern Web Application Patterns
- 15:32Multiple Pods
- 16:28Annotations
- 16:49Annotations and Virtual Hosts
- 19:19I have to answer all these questions
- 19:44Ingress isnt broken
- 20:08What is FTO
- 20:33Yahoo Japan
- 21:43IngressRoute
- 22:16Load Balancing
- 22:44Configuration Reload Support
- 25:01Change the Rules
- 25:34BlueGreen Deployments
- 26:34Delegation
- 27:33Google Finance
- 27:51TLS Secret
- 28:07Split Routes
- 28:53Ingress Wrap
- 29:14Delegate
- 29:44Finance
- 29:56Host
- 30:24DNS
- 30:44Restricting DNS
- 31:38Questions
related talks
36mIngressRoute: A Path Towards a Better Ingress Object for Kubernetes
35mContour, a High Performance Multitenant Ingress Controller for Kubernetes
12mTalk Deep Dive
25mContour, A High Performance Multitenant Ingress Controller for Kubernetes
38mContour Ingress Intro and Deep Dive
27mContour, a High Performance Multitenant Ingress Controller for Kubernetes
49mAdvanced Ingress for Your Kubernetes Apps
32mKubernetes Ingress: Your Router, Your Rules
