kubernetes之ingress配置https

创建测试证书

openssl genrsa -out nginx.key 2048
openssl req -new -x509 -key nginx.key -out nginx.crt -subj /C=CN/ST=Beijing/L=Beijing/O=ssltest/CN=www.test.com

其中CN=www.test.com为想要访问的域名

创建secret

kubectl create secret tls nginx-secret --cert=nginx.crt --key=nginx.key

编写ingress yaml文件

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: nginx-ingress
spec:
  tls:
  - hosts:
    - www.test.com
    secretName: nginx-secret
  rules:
  - host: www.test.com
    http:
      paths:
      - path: /
        backend:
          serviceName: nginx
          servicePort: 80

验证

解析node主机域名问www.test.com然后在浏览器中访问