Live data from Hacker News

Kubernetes Ingress Nginx is retiring

kubernetes.dev

61–70 of 178 posts

Re: Kubernetes Ingress Nginx is retiring

#61
post #19

How do you people even keep up with this? I'm going back to cybersecurity after trying DevOps for a year, it's not for me. I miss my sysadmin days, things were simple back then and worked. Maybe I'm just getting old and my cognitive abilities are declining. It seems to me that the current tech scene doesn't reward simple.

Cybersecurity is easier? Isn't it all about constantly updating and patching obsolete vulnerable stuff - most annoying part of ops?

Re: Kubernetes Ingress Nginx is retiring

#62
post #21
post #20

It's in beta, but HAProxy has a gateway product: https://www.haproxy.com/blog/announcing-haproxy-unified-gate...

Love haproxy but if we’re shilling projects istio is superior. Multi cluster, hbone, ambient.

What is hbone? What is ambient?

Re: Kubernetes Ingress Nginx is retiring

#63
post #44
post #39

Earlier quoted context omitted.

The Ingress API has been on ice for like 5 years. The core Kubernetes API doesn't change that much, at least these days. There's an infinite number of (questionable) add-ons you can deploy in your cluster, and I think that's mostly where folks get stuck in the mud.

> doesn’t change that much Yet they are retiring a core Ingress that has been around for almost as long as Kubernetes has.

They are not retiring the API. Nginx Ingress is one of the many projects that implements this API, and you are free to migrate to another implementation.

Re: Kubernetes Ingress Nginx is retiring

#64
post #46
post #19

How do you people even keep up with this? I'm going back to cybersecurity after trying DevOps for a year, it's not for me. I miss my sysadmin days, things were simple back then and worked. Maybe I'm just getting old and my cognitive abilities are declining. It seems to me that the current tech scene doesn't reward simple.

/r/kubernetes had this announcement up about five mins after it dropped at Kubecon. It's a huge deal. So many tutorials and products used ingress-nginx for basic ingress, so them throwing in the towel (but not really) is big news. That said, (a) the Gateway API supercedes Ingress and provides much more functionality without much more complexity, and (b) NGINX and HAproxy have Gateway controllers. To generally answer…

> /r/kubernetes had this announcement up about five mins after it dropped at Kubecon. It's a huge deal. So many tutorials and products used ingress-nginx for basic ingress, so them throwing in the towel (but not really) is big news.

I was one of those whose first reaction was surprise, because ingress was the most critical and hardest aspect of a kubernetes rollout to implement and get up and running on a vanilla deployment. It's what cloud providers offer out of the box as a major selling point to draw in customers.

But then I browsed through the Gateway API docs, and it is a world of difference. It turns a hard problem that requires so many tutorials and products to help anyone get something running into a trivially solvable problem. The improvements on their security model is undoubtedly better and alone clearly justifies getting rid of ingress.

Change might be inconvenient, but you need change to get rid of pain points.

Re: Kubernetes Ingress Nginx is retiring

#65

Earlier quoted context omitted.

Only a single maintainer for years, and it's fallen now to best-effort.

I (and others) have offered to create a PR for issues opened — just point us in the right direction we asked. The maintainer always came back with “I fixed it for you”. The maintainer had plenty of people who wanted to help, but never spent the time to teach them.

Are you blaming the maintainer? lol, lmao even

Re: Kubernetes Ingress Nginx is retiring

#66
post #48
post #41

Earlier quoted context omitted.

This just seems like sensationalist nonsense spoken by someone who hasn’t done a second of Ops work. Kubernetes is incredibly reliable compared to traditional infrastructure. It eliminates a ton of the configuration management dependency hellscape and inconsistent application deployments that traditional infrastructure entails. Immutable containers provide a major benefit to development velocity and deployment reliab…

It was clear they didn't know what they were saying when they think the main reason for kubernetes was to save money. Kubernetes is just easy to complain about.

Exactly, if anything, Kubernetes will require a lot more money.

Re: Kubernetes Ingress Nginx is retiring

#67
post #65

Earlier quoted context omitted.

I (and others) have offered to create a PR for issues opened — just point us in the right direction we asked. The maintainer always came back with “I fixed it for you”. The maintainer had plenty of people who wanted to help, but never spent the time to teach them.

Are you blaming the maintainer? lol, lmao even

Not exactly blaming them. But saying opportunities were missed, for sure.

Re: Kubernetes Ingress Nginx is retiring

#68
post #53

Earlier quoted context omitted.

> things were simple back then If you were working in the orgs targeted by k8s, I think it was generally more of a mess. Think about managing a park of 100~200 servers with home made bash scripts and crappy monitoring tools and a modicum of dashboards. Now, k8s has engulfed a lot more than the primary target, but smaller shops go for it because they'r also hoping to hit it big someday I guess. Otherwise, there will b…

Even after the bash script era, I don’t think the configuration management landscape gets enough discredit for how bad it is. I never felt like it stopped feeling hacked together and unreliable. E.g., Chef Software, especially after its acquisition, is just a dumpster fire of weird anti-patterns and seemingly incomplete, buggy implementations. Ansible is more of the gold standard but I actually moved to Chef to gain…

Yup. K8s is a bit of a pain to keep up with, but Chef and even Ansible are much more painful for other reasons once you have more than a handful of nodes to manage.

It's also basically a standard API that every cloud provider is forced to implement, meaning it's really easy to onboard new compute from almost anyone. Each K8s cloud provider has its own little quirks, but it's much simpler than the massive sea of difference that each cloud's unique API for VM management was (and the tools to paper over that were generally very leaky abstractions in the pre-K8s world).

Re: Kubernetes Ingress Nginx is retiring

#69
Kubernetes is never maturing. It keeps moving. An installation just a year ago would have things that would require significant planning to upgrade.

What is missing is an open source orchestrator that has a feature freeze and isn't Nomad or docker swarm.

Re: Kubernetes Ingress Nginx is retiring

#70
post #19

How do you people even keep up with this? I'm going back to cybersecurity after trying DevOps for a year, it's not for me. I miss my sysadmin days, things were simple back then and worked. Maybe I'm just getting old and my cognitive abilities are declining. It seems to me that the current tech scene doesn't reward simple.

> things were simple back then If you were working in the orgs targeted by k8s, I think it was generally more of a mess. Think about managing a park of 100~200 servers with home made bash scripts and crappy monitoring tools and a modicum of dashboards. Now, k8s has engulfed a lot more than the primary target, but smaller shops go for it because they'r also hoping to hit it big someday I guess. Otherwise, there will b…

> Otherwise, there will be far easier solutions at lower scale.

Which solutions do you have in mind?

- VPS with software installed on the host

- VPS(s) with Docker (or similar) running containers built on-host

- Server(s) with Docker Swarm running containers in a registry

- Something Kubernetes like k3s?

In a way there's two problems to solve for small organisations (often 1 server per app, but up to say 3): the server, monitoring it and keeping it up to date, and the app(s) running on each server and deploying and updating them. The app side has more solutions, so I'd rather focus on the server side here.

Like the sibling commenter I strongly dislike the configuration management landscape (with particular dislike of Ansible and maintaining it - my takeaway is never use 3rd party playbooks, always write your own). As often for me these servers are set up, run for a bit and then a new one is set up and the app redeployed to that (easier than an OS upgrade in production) I've gone back to a bash provisioning script, slightly templated config files and copying them into place. It sucks, but not as much as debugging Ansible has.

Post reply on HN