SShortSingh.
Back to feed

How to Set Up Nginx Ingress Controller with SSL/TLS on Kubernetes

0
·1 views

The Nginx Ingress Controller serves as a single entry point for Kubernetes clusters, handling SSL/TLS termination, load balancing, and path-based routing via Nginx. A technical guide published on DEV Community walks through installing the controller using Helm, deploying two sample applications behind it, and securing them with HTTPS. The setup uses cert-manager alongside Let's Encrypt to automatically issue free SSL certificates, while also covering the option to import commercial certificates. Prerequisites include a Kubernetes cluster with at least two nodes, kubectl, the Helm package manager, and a registered domain name. Once configured, both applications become accessible over HTTPS through a single shared Ingress controller.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer Launches Self-Hosted Session Replay Tool Aimed at Startups and Side Projects

A developer has built TraceUX, a lightweight, self-hosted session replay tool designed for early-stage startups and side projects. The tool addresses a common pain point where founders cannot tell where users drop off, but existing solutions charge based on traffic, seats, or recorded sessions. TraceUX records DOM events and stores them on the user's own server, requiring no data warehouse or complex multi-service setup. It can be deployed via a binary or Docker container on a small VPS, with a short code snippet added to the target website. The project is open source and available on GitHub, with a live demo accessible for evaluation.

0
ProgrammingDEV Community ·

OpenAI Unveils Defense Factory, a Continuous AI Security Operations Model

OpenAI has publicly detailed Defense Factory, an agent-first, continuous security program designed to identify, validate, and remediate vulnerabilities across its own systems. The initiative originated from an internal security sprint that mobilized over 250 people across hundreds of service areas. Rather than treating security as a periodic review, OpenAI frames it as a closed-loop cycle with five linked stages: inventory, discovery, validation, ownership assignment, and remediation verification. The program features a dedicated architecture that separates control and data planes to support isolated, reproducible development environments. OpenAI intends to publish workflows and findings on an ongoing basis, positioning the model as a scalable reference for organizations deploying AI at scale.

0
ProgrammingDEV Community ·

How to Debug Phone Verification Failures in Game Account Recovery Flows

Developers building game account recovery systems often struggle to diagnose phone verification failures because send and verify steps are treated as unrelated endpoints rather than a single auditable trace. A robust approach involves creating a state machine that records each attempt with a unique ID, normalized phone hash, expiry time, and server-side status before any message is sent. Every transition — from code dispatch to carrier delivery to player verification — should be logged with timestamps and actors, without ever storing the raw code or full phone number. Linking a consistent attempt ID across send, delivery, and verify phases helps pinpoint exactly where a failure occurred, whether at the queue, the carrier, or the verification step. This structured tracing is especially critical in gaming contexts where accounts can represent years of purchases and progress, requiring a recovery flow that is both user-forgiving and resistant to takeover.

0
ProgrammingDEV Community ·

Mobile Money Idempotency Flaws Risk Double Charges as UEMOA Deadline Looms

With the BCEAO's September 30 deadline approaching for PI-SPI platform integration, many UEMOA development teams are writing payment code under pressure. A technical analysis of three mobile money providers — MTN, Wave, and Orange Money — reveals that only MTN offers a true idempotency key via its X-Reference-Id header. MTN's 409 conflict response is frequently mishandled by developers, who may interpret it as a failure and trigger a second payment request, resulting in duplicate charges. Wave has no idempotency header at all, requiring developers to build their own safeguards using the client_reference field. The article warns that these integration gaps are the kind of bugs that only surface in production, where real customer funds are at risk.

How to Set Up Nginx Ingress Controller with SSL/TLS on Kubernetes · ShortSingh