Hi Steve Howe,

Welcome to the Microsoft Q&A Platform. Thank you for posting your query here. We are looking into it and will get back to you soon.

Hi Steve Howe,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

I understand that you are facing issue with a 502 Bad Gateway error when trying to connect to the nginx load balancer in your Kubernetes cluster.

Here are some steps you can take to troubleshoot the issue further:

Verify the Ingress Resource: Ensure that the Ingress resource is correctly configured to route traffic to your service. You can check this with the command kubectl get ingress.

Check the Service Configuration: Make sure that the service is active and properly configured to route traffic to the correct port on your pod. Use kubectl get svc to verify the service details.

Check for SSL/TLS Issues: If you’re using SSL/TLS, ensure that the certificates are correctly configured.

DNS Resolution: Make sure your Cloudflare DNS is sending traffic to the correct load balancer. The DNS pointing to the right public IP address of the Load balancer and that is set properly in Cloudflare.

If you have any further queries, do let us know. If it was helpful, please click "Upvote" on this post to let us know.

The domain is now going to a server, so I am at least getting a response but am now getting

{
  "kind": "Status",
  "apiVersion": "v1",
  "metadata": {},
  "status": "Failure",
  "message": "Unauthorized",
  "reason": "Unauthorized",
  "code": 401
}

Hi Steve Howe,
Thanks for your response,
I understand that you are facing a 401 Unauthorized error. This usually signifies that the request you are attempting to make lacks valid authentication credentials.

Please make sure that you are including the appropriate API key or token in your request headers. This is commonly achieved through the Authorization header or X-API-KEY. Furthermore, check that the credentials you are using the required permissions to access the desired resource and ensure that the session has not expired.
If this resolves your issue, please let us know.

I am not getting a 401. I am receiving a 502 error.

Here is my Dockerfile:

FROM composer:2.5 AS build-env FROM php:8.2-fpm ENV PORT 80 EXPOSE 80 COPY --from=build-env /app /var/www/

Set working directory

WORKDIR /var/www

Install dependencies

RUN apt-get update && apt-get install -y
build-essential
libpng-dev
libjpeg62-turbo-dev
libfreetype6-dev
locales
zip
jpegoptim optipng pngquant gifsicle
vim
unzip
nginx
openssl
libssl-dev
certbot
python3-certbot-nginx
libcurl4-openssl-dev
git
curl
libonig-dev
libxml2-dev
libzip-dev
npm
&& docker-php-ext-install pdo_mysql mbstring exif pcntl bcmath gd zip sockets
&& pecl install mongodb && docker-php-ext-enable mongodb
&& apt-get clean && rm -rf /var/lib/apt/lists/* RUN usermod -u 1000 www-data;
chown -R www-data:www-data /var/www/ COPY --from=composer:latest /usr/bin/composer /usr/bin/composer COPY composer.json composer.lock /var/www/ RUN composer install --no-scripts --no-autoloader COPY default.conf /etc/nginx/sites-available/default COPY . /var/www/ COPY .env.example .env COPY --chown=www-data:www-data . /var/www RUN chown -R www-data:www-data /var/www/storage /var/www/bootstrap/cache RUN npm install RUN npm install vue@3 @vue/compiler-sfc RUN npm run build USER www-data

And here is my GitHub workflow deployment.yaml

apiVersion: apps/v1 kind: Deployment metadata: name: gitdash labels: app: gitdash kubernetes.azure.com/generator: devhub namespace: namespace-workflow spec: replicas: 1 progressDeadlineSeconds: 1800 # Add this field to increase the deadline selector: matchLabels: app: gitdash template: metadata: labels: app: gitdash spec: containers:

• name: gitdash image: image-workflow:latest imagePullPolicy: Always ports:
• containerPort: 80

---

apiVersion: apps/v1 kind: Deployment metadata: name: php-app namespace: namespace-workflow spec: replicas: 1 selector: matchLabels: app: php-app template: metadata: labels: app: php-app spec: containers:

• name: nerdslice-app image: image-workflow:latest volumeMounts:
• name: app-volume mountPath: /var/www
• name: entrypoint-script mountPath: /docker-entrypoint.sh env:
• name: VIRTUAL_HOST value: "dashboard.nerdslice.com"
• name: LETSENCRYPT_HOST value: "dashboard.nerdslice.com"
• name: LETSENCRYPT_EMAIL value: "some"
• name: TZ value: "America/Denver" ports:
• containerPort: 80 volumes:
• name: app-volume persistentVolumeClaim: claimName: app-pvc
• name: entrypoint-script configMap: name: entrypoint-script

---

apiVersion: apps/v1 kind: Deployment metadata: name: nginx namespace: namespace-workflow spec: replicas: 1 progressDeadlineSeconds: 1800 # selector: matchLabels: app: nginx template: metadata: labels: app: nginx spec: containers:

• name: nginx image: nginx:alpine volumeMounts:
• name: app-volume mountPath: /var/www
• name: nginx-config mountPath: /etc/nginx/conf.d/default.conf subPath: default.conf ports:
• containerPort: 80 volumes:
• name: app-volume persistentVolumeClaim: claimName: app-pvc
• name: nginx-config configMap: name: nginx-config

---

apiVersion: v1 kind: PersistentVolumeClaim metadata: name: app-pvc spec: accessModes:

• ReadWriteOnce resources: requests: storage: 1Gi

---

apiVersion: v1 kind: Service metadata: name: php-service spec: selector: app: php-app ports:

• protocol: TCP port: 80 targetPort: 80 type: ClusterIP

---

apiVersion: v1 kind: Service metadata: name: nginx-service namespace: namespace-workflow spec: selector: app: nginx ports:

• protocol: TCP port: 80 targetPort: 80 type: LoadBalancer

---

apiVersion: v1 kind: ConfigMap metadata: name: nginx-config namespace: namespace-workflow data: default.conf: | server { listen 80; server_name site.com; root /var/www/public; index index.php index.html; location / { try_files $uri $uri/ /index.php?$query_string; } location ~ .php$ { try_files $uri =404; fastcgi_split_path_info ^(.+.php)(/.+)$; fastcgi_pass 127.0.0.1:9000; # Assuming PHP-FPM is running on localhost:9000 fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; } location ~ /.ht { deny all; } } server { listen 443 ssl; server_name site.com; root /var/www/public; index index.php index.html; location / { try_files $uri $uri/ /index.php?$query_string; } location ~ .php$ { try_files $uri =404; fastcgi_split_path_info ^(.+.php)(/.+)$; fastcgi_pass 127.0.0.1:9000; # Assuming PHP-FPM is running on localhost:9000 fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; } location ~ /.ht { deny all; } }

apiVersion: v1 kind: Service metadata: name: php-fpm namespace: namespace-workflow spec: selector: app: php-fpm ports:

• protocol: TCP port: 9000 targetPort: 9000

---

apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: dashboardfornerds annotations: nginx.ingress.kubernetes.io/rewrite-target: / spec: rules:

• host: "site.com" http: paths:
• path: / pathType: Prefix backend: service: name: my-service port: number: 80 tls:
• hosts:
• "site.com" secretName: tls-secret