Expose the Pachyderm UI Through an Ingress Resource¶
Before completing the steps in this section, read Overview.
A Kubernetes Ingress enables you to allow external traffic inside of a Pachyderm cluster. Specifically, if you do not want to use port-forwarding, you might want to expose the Pachyderm UI,
dash through an Ingress resource. To do so, you need to deploy an ingress controller and ingress resource object on the Kubernetes cluster that runs your Pachyderm cluster. While Kubernetes supports multiple ingress controllers, not all of them might work seamlessly with Pachyderm. See Pachyderm Ingress Requirements for more information.
In addition, follow these recommendations:
- Follow the recommendations in the Traefik Kubernetes installation documentation that are appropriate for your situation for installing Traefik.
- You can deploy the
Ingressresource in any namespace.
- You need to have administrative access to the hostname that you specify in the
hostnamefield in the
- Do not create routes (
pachdservices or S3 services in the
This section provides an example of how to deploy a Traefik ingress controller in minikube.
If you cannot use Traefik, you can try to deploy another ingress controller, such as NGINX, using the provided example.
To expose the Pachyderm UI through a Traefik resource, complete the following steps:
- Deploy a Pachyderm cluster to a cloud provider of your choice as described in Deploy Pachyderm. For production deployments, deploy with the
- Enable authentication as described in Configure Access Controls.
Deploy the Traefik ingress controlleri as described in the Traefik Documentation:
Note: The commands below deploy an example Traefik ingress. For the latest version of Traefik controller, see the Traefik documentation.
kubectl apply -f https://raw.githubusercontent.com/pachyderm/pachyderm/master/examples/traefik-ingress/roles.yaml kubectl apply -f https://raw.githubusercontent.com/pachyderm/pachyderm/master/examples/traefik-ingress/traefik-daemonset.yaml
Deploy the Ingress resource. The following text is an example metadata file. You need to adjust it to your deployment:
Make sure that you modify the following parameters:
hostname— an address at which the Pachyderm UI will be available. For example,
port— the ports on which the
dashapplication will run. It can be the same or different ports.
When done editing, save the file and run:
kubectl apply -f traefik-ingress-minikube.yaml
After you deploy the Traefik ingress, the Pachyderm service should be available at the
<hostname>:<port>that you have specified.