There are many ways to get traffic into the cluster. The most common approach is to use the {product-title} router as the ingress point for external traffic destined for services in your {product-title} installation.
{product-title} provides and supports the following router plug-ins:
-
The HAProxy template router is the default plug-in. It uses the image to run an HAProxy instance alongside the template router plug-in inside a container on {product-title}. It currently supports HTTP(S) traffic and TLS-enabled traffic via SNI. The router’s container listens on the host network interface, unlike most containers that listen only on private IPs. The router proxies external requests for route names to the IPs of actual pods identified by the service associated with the route.
-
The F5 router integrates with an existing F5 BIG-IP® system in your environment to synchronize routes. F5 BIG-IP® version 11.4 or newer is required in order to have the F5 iControl REST API.
When
namespace labels
are used, for example in creating
router shards,
the service account for the router must have cluster-reader permission.
$ oc adm policy add-cluster-role-to-user \
cluster-reader \
system:serviceaccount:default:router