Search code examples
kuberneteskubernetes-ingressnginx-ingress

ingress-nginx-controller-admission: what does it do? Why is it there

I am new to Kubernetes. Setting up nginx-ingress in a test cluster. One of our senior people rolled by and noticed the following.

# kubectl get services
...
ingress-ingress-nginx-controller-admission   ClusterIP      xx.xxx.xxx.xxx   <none>        443/TCP
...

What's that, he asked. Get rid of it if you don't need it.

Before I rip it out and maybe get cripple my test cluster .. what is ingress-nginx-controller-admission and why do I need it?

Solution

  • It's the service for the validating webhook that ingress-nginx includes. If you remove it, you'll be unable to create or update Ingress objects unless you also remove the webhook configuration.

    tl;dr it's important, no touchy