Advanced Mapping Configuration
Ambassador Edge Stack is designed so that the author of a given Kubernetes service can easily and flexibly configure how traffic gets routed to the service. The core abstraction used to support service authors is a mapping, which maps a target backend service to a given host or prefix. For Layer 7 protocols such as HTTP, gRPC, or WebSockets, the Mapping
resource is used. For TCP, the TCPMapping
resource is used.
Ambassador Edge Stack must have one or more mappings defined to provide access to any services at all. The name of the mapping must be unique.
Mapping Evaluation Order
Ambassador Edge Stack sorts mappings such that those that are more highly constrained are evaluated before those less highly constrained. The prefix length, the request method, and the constraint headers are all taken into account.
If absolutely necessary, you can manually set a precedence
on the mapping (see below). In general, you should not need to use this feature unless you're using the regex_headers
or host_regex
matching features. If there's any question about how Ambassador Edge Stack is ordering rules, the diagnostic service is a good first place to look: the order in which mappings appear in the diagnostic service is the order in which they are evaluated.
Optional Fallback Mapping
Ambassador Edge Stack will respond with a 404 Not Found
to any request for which no mapping exists. If desired, you can define a fallback "catch-all" mapping so all unmatched requests will be sent to an upstream service.
For example, defining a mapping with only a /
prefix will catch all requests previously unhandled and forward them to an external service:
---apiVersion: getambassador.io/v2kind: Mappingmetadata:name: catch-allspec:prefix: /service: https://www.getambassador.io
Using precedence
Ambassador Edge Stack sorts mappings such that those that are more highly constrained are evaluated before those less highly constrained. The prefix length, the request method, and the constraint headers are all taken into account. These mechanisms, however, may not be sufficient to guarantee the correct ordering when regular expressions or highly complex constraints are in play.
For those situations, a Mapping
can explicitly specify the precedence
. A Mapping
with no precedence
is assumed to have a precedence
of 0; the higher the precedence
value, the earlier the Mapping
is attempted.
If multiple Mapping
s have the same precedence
, Ambassador Edge Stack's normal sorting determines the ordering within the precedence
; however, there is no way that Ambassador Edge Stack can ever sort a Mapping
with a lower precedence
ahead of one at a higher precedence
.
Using tls
In most cases, you won't need the tls
attribute: just use a service
with an https://
prefix. However, note that if the tls
attribute is present and true
, Ambassador Edge Stack will originate TLS even if the service
does not have the https://
prefix.
If tls
is present with a value that is not true
, the value is assumed to be the name of a defined TLS context, which will determine the certificate presented to the upstream service. TLS context handling is a beta feature of Ambassador Edge Stack at present; please contact us on Slack if you need to specify TLS origination certificates.
Namespaces and Mappings
If AMBASSADOR_NAMESPACE
is correctly set, Ambassador Edge Stack can map to services in other namespaces by taking advantage of Kubernetes DNS:
service: servicename
will route to a service in the same namespace as the Ambassador Edge Stack, andservice: servicename.namespace
will route to a service in a different namespace.
Linkerd Interoperability (add_linkerd_headers
)
When using Linkerd, requests going to an upstream service need to include the l5d-dst-override
header to ensure that Linkerd will route them correctly. Setting add_linkerd_headers
does this automatically, based on the service
attribute in the Mapping
.
If add_linkerd_headers
is not specified for a given Mapping
, the default is taken from the ambassador
Module. The overall default is false
: you must explicitly enable add_linkerd_headers
for Ambassador Edge Stack to add the header for you (although you can always add it yourself with add_request_headers
, of course).
Questions?
We’re here to help. If you have questions, join our Slack or contact us.