Possible to change ingress port instead of 80 & 443

[NathanAvx]

Hi @scholzj

Running Strimzi kafka with Ingress external listener.

$kubectl -n avx-kafka describe pod nginx-ingress-nginx-controller-64cf496599-j47s2

Name:         nginx-ingress-nginx-controller-64cf496599-j47s2
Namespace:    avx-kafka
Priority:     0
Node:         ip-172-31-20-135.ap-south-1.compute.internal/172.31.20.135
Start Time:   Thu, 04 Mar 2021 11:16:44 +0000
Labels:       app.kubernetes.io/component=controller
              app.kubernetes.io/instance=nginx
              app.kubernetes.io/name=ingress-nginx
              pod-template-hash=64cf496599
Annotations:  cni.projectcalico.org/podIP: 10.244.53.164/32
              cni.projectcalico.org/podIPs: 10.244.53.164/32
Status:       Running
IP:           10.244.53.164
IPs:
  IP:           10.244.53.164
Controlled By:  ReplicaSet/nginx-ingress-nginx-controller-64cf496599
Containers:
  controller:
    Container ID:  docker://36d0b5ad093b5f9f9883f32d04468e16a6433b9ad20d1bbd3c06656d5dae46ee
    Image:         k8s.gcr.io/ingress-nginx/controller:v0.44.0
    Image ID:      docker://sha256:435df390f3673c475f60eac1ed1c12fd1aea2e8a083927325aa6d5c969c5c8d2
    Ports:         80/TCP, 32443/TCP, 8443/TCP
    Host Ports:    80/TCP, 32443/TCP, 0/TCP
    Args:
      /nginx-ingress-controller
      --publish-service=$(POD_NAMESPACE)/nginx-ingress-nginx-controller
      --election-id=ingress-controller-leader
      --ingress-class=nginx
      --configmap=$(POD_NAMESPACE)/nginx-ingress-nginx-controller
      --validating-webhook=:8443
      --validating-webhook-certificate=/usr/local/certificates/cert
      --validating-webhook-key=/usr/local/certificates/key
      --enable-ssl-passthrough
      --http-port=80
      --https-port=32443
    State:          Running
----truncated-----

$kubectl -n avx-kafka describe service/nginx-ingress-nginx-controller

Name:                     nginx-ingress-nginx-controller
Namespace:                avx-kafka
Labels:                   app.kubernetes.io/component=controller
                          app.kubernetes.io/instance=nginx
                          app.kubernetes.io/managed-by=Helm
                          app.kubernetes.io/name=ingress-nginx
                          app.kubernetes.io/version=0.44.0
                          helm.sh/chart=ingress-nginx-3.23.0
Annotations:              meta.helm.sh/release-name: nginx
                          meta.helm.sh/release-namespace: avx-kafka
Selector:                 app.kubernetes.io/component=controller,app.kubernetes.io/instance=nginx,app.kubernetes.io/name=ingress-nginx
Type:                     LoadBalancer
IP:                       10.110.220.188
External IPs:             65.1.166.117
Port:                     http  80/TCP
TargetPort:               80/TCP
NodePort:                 http  32409/TCP
Endpoints:                10.244.53.164:80
Port:                     https  32443/TCP
TargetPort:               32443/TCP
NodePort:                 https  32377/TCP
Endpoints:                10.244.53.164:32443
Session Affinity:         None
External Traffic Policy:  Cluster
Events:                   <none>

Ingress Bootstrap & brokers are running on port 443 even though the load balancer is running on 32443
Is it possible to change ingress port instead of 80 & 443 ?

Please advice.

[scholzj]

I do not think there is any real place where we can read the port in your case easily. Even your Ingress resources seem to suggest it is 443. But you can use the Kafka CR to override the advertised port and customize it that way: https://strimzi.io/docs/operators/latest/full/using.html#type-GenericKafkaListenerConfigurationBroker-reference

[NathanAvx]

Sorry for not being clear.
As you said I have tried advertisedPort to change the ingress resource port to 32443 but still it is running in 443.

        configuration:
          bootstrap:
            host: bootstrap.192.168.95.146.nip.io
          brokers:
          - broker: 0
            host: broker-0.192.168.95.146.nip.io
            advertisedPort: 32443

I'm using strimzi 0.19.0

[scholzj]

What exactly you mean with still running in 443? That it is still using 443 as the advertised port?

[NathanAvx]

Yes

[scholzj]

Can you share your full Kafka CR including the status section and the Kafka logs then?

[NathanAvx]

ok. will do. thanks.