I deployed the controller using k3d in ec2 machine following the blog , Deploy OpenZiti in Kubernetes with Ease Using k3d , --namespace "ziti" --create-namespace \ --set clientApi.advertisedHost="ec2-<my_ip>.eu-north-1.compute.amazonaws.com" \ --set clientApi.advertisedPort=1280 \ --set clientApi.…

That appears to be the correct URL based on the advertised address and port you showed here. Can you connect to the controller and inspect the certificate and confirm the DNS SANS field contains this address? This doesn't mean much to me: was not able to access console on browser it complained th…

@sadath-12 how were you deploying ZAC? Did you run using the following steps? npm install ng build ziti-console-lib ng build ziti-console-node node server

No @rgalletto but I deployed via helm helm install \ --namespace ziti-console --create-namespace --generate-name \ openziti/ziti-console \ --set service.type=LoadBalancer \ --set service.advertisedPort=80 then edited to the NodePort

Ahh ok I see. So if you are self hosting and accessing ZAC locally via HTTPS the "untrusted certificate" error is expected unless you use a self signed cert that is trusted by your systems trust store. There are a few different setup guides out there that explain how to do this, but the one i typic…

I've never installed ziti console in kubernetes but when in docker or directly starting the node server, if you set these environment variables and supply valid cert/key # The in-container path for the key file to use for TLS. ENV ZAC_SERVER_KEY= # The in-container path for the cert bundle file to …

In Kubernetes, the best way to configure a TLS server certificate for the standalone ZAC Node.js server is with Cert Manager (CM) ( section link ) and an Ingress Controller with the ClusterIP service type instead of the NodePort service type you're currently using. This feature will deprecate the sta…

I think we should have insecure option as well to use , for dev purposes

I see what you mean. When I install the ziti-console chart to deploy the standalone ZAC Node.js server without an Ingress Controller, the web browser displays an empty white screen and the Javascript console complains about an SSL error, citing a CORS violation. As a workaround, you can deploy the …

thanks @qrkourier you sense me nicely . I am aware localhost is considered as secure , but this cluster is in aws not in my local . So instead I tried to ssh-tunnel into my laptop and opened zac and it works after that the issue is it is not connecting to the controller and the steps i tried to lo…

How to access Ziti Controller via Console

Ziti Overlay

sadath-12 June 19, 2024, 1:39pm 3

There is no certificate here , I installed it from here Install the Console in Kubernetes | OpenZiti
without additional configuring

Topic		Replies	Views
No Controllers Available Ziti Administration Console	16	186	February 16, 2025
Invalid ssl using ssl-passthrough in ziti controller Ziti Overlay	24	278	January 14, 2025
Admin Console not connecting to Edge Controller	43	1227	January 31, 2023
Best practices of securing controller (and ZAC) Ziti Overlay	23	1006	March 8, 2023
Unable to access Zac after installing OpenZiti controller Ziti Administration Console	3	118	October 20, 2024

How to access Ziti Controller via Console

Related topics