How do NodePort Services work? about terraform-hcloud-kube-hetzner HOT 7 CLOSED

Don't worry, it's not about Terraform. Everything happens in templates/traefik_config.yaml.tpl , as you mentioned above.

Basically, you are dealing with a HelmChartConfig, and you want to add another entrypoint, so find how you do that with the Traefik Helm Values file, and add those values in the HelmChartConfig template above.

The section you probably want to add/and customize is the ports section here.

In the screenshot, you can see that ports is a sister key to additionalArguments (they are on the same level), so do the same, just copy-paste the whole ports section in the HelmChartConfig, and add the entrypoints for your game servers there, on ports other than the ones already used.

Last but not least, add the same additionalArguments for them, to allow proxy protocols.

from terraform-hcloud-kube-hetzner.

Awesome, will try that later, thank you so much!

from terraform-hcloud-kube-hetzner.

Hey @MartiniMoe, you just need to open the incoming port on the Hetzner firewall in the project where your Kube cluster lives. As for the load balancer, it does not come into the picture here. A NodePort is an opening directly on a node, so no interaction whatsoever with the LB.

Basically, you open the port on the Hetzner Firewall, then create the NodePort, and you should be able to hit the service with the Node IP directly, and the externally specified port in Kube (same as in the firewall).

It's been a long time I have not done this, but that should be the case. Nowadays, I just use Ingress through the LB for everything.

from terraform-hcloud-kube-hetzner.

But then you can't use - for example - the default ports of dedicated game servers, right? Because everything goes over Port 80 or 443, right?

from terraform-hcloud-kube-hetzner.

Yes, you could, you are not at all limited to HTTP or SSL, you can open any port you wish as a NodePort, open a hole in the firewall, and that's it.

Now you could also do the same with your Traefik ingress controller, as unlike Nginx it's not limited to the two ports above either, it can do any TCP or even UDP ports. Again, you never ever touch the LB manually, Traefik has everything it needs thanks to the proxy protocol comms it has with the LB.

from terraform-hcloud-kube-hetzner.

Thanks! If I would do it with a Traefik Ingress I would define another entrypoint in templates/traefik_config.yaml.tpl for that port, right?

The thing is I do not understand until now how port 80 and 443 are mapped to the existing entrypoints web and websecure. Maybe I should just get more into terraform for the moment...

from terraform-hcloud-kube-hetzner.

Hey @MartiniMoe, will close this, but if you have any more questions, do not hesitate to continue the discussion here.

from terraform-hcloud-kube-hetzner.