Kubernetes Ingress Generator

Generate a Kubernetes Ingress for ingress-nginx or Traefik, with path routing to several services, TLS from cert-manager and an upload size limit.

Free · No sign-up · Your inputs stay in your browser

Input

Generate a Kubernetes Ingress

NameHost

PathsOne per line: path=service:portIngress controllerTLS with cert-managerClusterIssuerMax request bodyingress-nginx defaults to 1m, which rejects most uploads with a 413.

Output

ingress.yaml

695 characters

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: web
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    nginx.ingress.kubernetes.io/proxy-body-size: 20m
spec:
  ingressClassName: nginx
  tls:
    - hosts: [app.example.com]
      secretName: web-tls
  rules:
    - host: app.example.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: web
                port:
                  number: 80
          - path: /api
            pathType: Prefix
            backend:
              service:
                name: api
                port:
                  number: 8080

pathType: Prefix matches by path segment, so /api matches /api/users but not /apiary. Longer paths win regardless of order. cert-manager reads the annotation, solves the ACME challenge and writes the certificate into the secret named under tls.

Runs in this browser. Nothing you paste is sent to a server.

About this tool

Method, assumptions, practical next steps, and limits.

Paths and priority

pathType Prefix matches by whole path segments, so /api matches /api/users but not /apiary, and the longest matching path wins whatever the order. Exact matches only the path itself. The Ingress documentation has the full matching rules.

The 413 on upload

ingress-nginx limits request bodies to 1 MB by default, so a file upload that works locally fails with 413 Request Entity Too Large behind the Ingress. The nginx.ingress.kubernetes.io/proxy-body-size annotation raises it per Ingress.

Frequently asked questions

Do I still need Ingress now that Gateway API exists?

Ingress is stable and still widely supported. Gateway API is its successor, with richer routing and roles; new clusters increasingly use it, and ingress-nginx's maintainers have announced its retirement in favour of Gateway API implementations.

How does cert-manager get the certificate?

It watches Ingresses with its annotation, solves the ACME challenge with the issuer you named, and writes the certificate and key into the secret named under tls.

Is what I paste sent anywhere?

No. The tool runs entirely in your browser with JavaScript. Nothing you type or paste is sent to our server or stored.

Kubernetes Ingress Generator

Generate a Kubernetes Ingress

ingress.yaml

Paths and priority

The 413 on upload

Frequently asked questions

Similar tools

.dockerignore Generator

docker-compose.yml Generator

YAML to JSON Converter