nsc expose container

expose container opens a public ingress to an exported port on a running container. The provided container needs to be up and running. For example, it can be started in advance using docker run within an ephemeral cluster. The exposed endpoint is encrypted with TLS and secured with Namespace authentication, so whoever has access to the workspace where the ephemeral environment was created in, will also have access to the endpoint.

Usage

nsc expose container <cluster-id> --container <name> [--container_port <port[,port]>] [--name <ingress-name>] [--source <docker|containerd>] [--output <plain|json>]

Example

In the example below we first create an ephemeral cluster, then SSH into the cluster, start the nginx container with docker run and then expose it using nsc expose container.

Create an ephemeral cluster:

$ nsc create
Created cluster "oiepencpc41im"
 deadline: 2023-04-25T09:46:03Z

SSH into the created cluster:

$ nsc ssh oiepencpc41im

and start nginx container within the created cluster:

oiepencpc41im:~# docker run --name nginx-foobar -p 80:80 -d nginx

Afterwards expose port 80 using the nsc expose container command:

$ nsc expose container oiepencpc41im --container nginx-foobar --container_port 80
Exported port 80 from nginx-foobar (20e97bc453c936a9665dd6ce75e0168c92a689cc92214303a87fc19a):
  https://nginx-foobar-j239700-oiepencpc41im.fra1.namespaced.app

Now you can visit the provided URL https://nginx-foobar-j239700-oiepencpc41im.fra1.namespaced.app in your browser and use your Namespace credentials for authentication.

Options

--container <name>

To specify a name of a container to expose. This option is required.

--container_port <port[,port]>

Exports the specified ports (separated by commas) as public ingresses. If the option is not provided, all the exported ports would be exposed.

--name <name>

Set the name of the exposed ingress. Setting a name is only permitted when exposing a single port. By default, ingress names will be generated by Namespace.

--source <source>

To specify the container runtime which was used to run the container. Supported options are docker and containerd. By default docker is used to lookup running containers.

-o <type>

Specifies the output format. Supported options are json and plain. By default plain output format is used.

--all

Export one ingress for each exported port of each running container.