My company has policies for domain names for certificate cre

Question

My company has policies for domain names for certificate creation How can I customize the Address <https docs flyte org en latest deployment aws manual html connecting to flyte|generated by> Flyte core Should that go in the ingress configuration

Shahwar Saleem · Answer

I am trying to connect to Flyte EKS Deployment and I am getting this error when trying to create a project ```root 60d7613e13ff workflows flytectl create project name flyte project id flyte project description example flyte project description labels app=flyte Error rpc error code = Unavailable desc = connection closed``` My flyte config yaml points to latest endpoint for my deployment

katrina · Answer

cc < Haytham Abuelfutuh> < Ketan kumare3 >

Katrina P · Answer

Yeah digging into my logs I also have an issue with the SSL cert I must be missing some config maybe somewhere

Katrina P · Answer

< Shahwar Saleem> on the office hours just now I jumped in when you were adding logging level to your admin where did you do that

katrina · Answer

hey < Katrina P> you can add a logger yaml block to your config map like so ``` logger yaml | logger show source true level 6 Debug ```

Katrina P · Answer

Thanks

Haytham Abuelfutuh · Answer

< Shahwar Saleem> so this address you referenced e g `` is generated by the ingress controller which ingress controller are you using If you want to use your own SSL certs you need to fill in this host field `` and setup SSL issuance to properly do that if you use cert manager operator it should happen automatically

Shahwar Saleem · Answer

I am using a cert manager but I can try filling that host field with domain name requirements

Shahwar Saleem · Answer

< Haytham Abuelfutuh> I did try adding that host field What is the difference in HOSTS and ADDRESS when we do `kubectl n ssaleem flyte get ingress`

Haytham Abuelfutuh · Answer

host is what you manually enter which Address is what the ingress controller generates If you delete and recreate the ingress you will get a different address everytime but the host can remain the same since it s a user managed property

Haytham Abuelfutuh · Answer

you are responsible for configuring DNS correctly for that host to point to that address usually a CNAME

Shahwar Saleem · Answer

I guessed the same So I filled out the host field I am trying ```flytectl create project name flyte project id flyte project description example flyte project description labels app=flyte``` And getting ```Error rpc error code = Unavailable desc = name resolver error produced zero addresses``` My hosts in `kubectl n ssaleem flyte get ingress` command are ```<http flytedev x y z io|flytedev x y z io>```

Shahwar Saleem · Answer

< Haytham Abuelfutuh> After pointing out a `host` value according to what my certificate allows I am now not even able to access console on the supposed host value say ``

Haytham Abuelfutuh · Answer

Have you configured the host to point to that load balancer in DNS records

Shahwar Saleem · Answer

Hmm I am not sure how to do that Does this have to be configured in my config files

Haytham Abuelfutuh · Answer

nope this is purely a domain config who owns the <http flytedev x y z io|flytedev x y z io> domain This is an optional step you totally don t have to use your own domain hence why these steps are not in the guide

Haytham Abuelfutuh · Answer

but I thought that s what your question is about you wanted a custom domain for flyte right

Shahwar Saleem · Answer

My company owns this and certificates are issued only to those domain names There is a format of domain names that we have to follow

Haytham Abuelfutuh · Answer

np so you will need to have someone who controls DNS records to be able to add a CNAME record for that domain

Haytham Abuelfutuh · Answer

and the value of the record need to be the load balancer The ADDRESS field from ingress

Shahwar Saleem · Answer

I see and after doing that the certificate would be validated for `<http flytedev x y z io|flytedev x y z io>`

Haytham Abuelfutuh · Answer

Depending on how you generated the cert if you have used cert manager or have manually issued a cert you will have to update the TLS section <https github com flyteorg flyte blob master charts flyte core values yaml L343 L347> specifically the `secretName`

Haytham Abuelfutuh · Answer

if you used ALB amp AWS Cert Manager you will just have to add the cert arn annotation on the ingress object

Haytham Abuelfutuh · Answer

networking ingress is one of those things that every company does differently unfortunately so most of that exercise is not Flyte specific but rather ingress controller LB SSL specific

Shahwar Saleem · Answer

My problem for the flytectl was solved by changing this line ``` separateGrpcIngressAnnotations HTTP2``` To ``` separateGrpcIngressAnnotations GRPC``` These annotations do nothing and can be removed ``` console GRPC```

Haytham Abuelfutuh · Answer

Oh thank you < Shahwar Saleem> Do you mind upstreaming that change Regarding gt ``` console gt GRPC``` These are only respected when you deploy nginx we tried to set the default annotations to work with either so they require less after deployment changes CC < Yee> < Yuvraj> < Brian Connolly>

Shahwar Saleem · Answer

Hi < Haytham Abuelfutuh> I will do that shortly

Shahwar Saleem · Answer

Opened PR <https github com flyteorg flyte pull 2702>

Ketan (kumare3) · Answer

< Shahwar Saleem> thank you