AWS upload certificate-add load balancing

Install AWS CLI

最新 CLI 的版本号，网址为：https://github.com/aws/aws-cli/blob/master/CHANGELOG.rst
1、curl "https://s3.amazonaws.com/aws-cli/awscli-bundle.zip" -o "awscli-bundle.zip"
2、unzip awscli-bundle.zip
3、sudo ./awscli-bundle/install -i /usr/local/aws -b /usr/local/bin/aws
4、查看版本 /usr/local/bin/aws --version

Quickly configure AWS CLI

$ aws configure
AWS Access Key ID [None]: AKIA5WXF2FCOJVXV3VVB
AWS Secret Access Key [None]: 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
Default region name [None]: ap-southeast-1  亚太新加坡    ap-northeast-2  亚太首尔
Default output format [None]: json
键入该命令时，AWS CLI 会提示您输入四条信息（访问密钥、秘密访问密钥，AWS 区域和输出格式），并将它们存储在名为 default 的配置文件（一个设置集合）中。
每当您运行的 AWS CLI 命令未明确指定要使用的配置文件时，就会使用该配置文件。
键  eks-kube   值 kubernetes-cluster     主机键  guanli   值  kongzhieksfuwu

The
commands for uploading crt and key certificates in the aws server are as follows:

$ aws iam upload-server-certificate --server-certificate-name 名称 --certificate-body file://证书.crt --private-key file://证书.key --certificate-chain file://证书.crt

Choose to create a load balance in the load balance of the ec2 instance, I use: Application Load Balancer

Fill in the name, add https , select the availability zone, you can choose according to the availability zone of the ec2 instance, you can choose one after selecting the instance availability zone

Select the certificate just uploaded from the server

Select a security group, the security group needs to open ports 80 and 443

Fill in the route name, the protocol is https

After adding the instance to the registered, select Finish

Because the cluster is only configured with 443, when you return, create a target group, click Create target group to select the default Instances, and name the Target group name, not the same as the load balancer name, select VPC: (Virtual Network of AWS Account), select Click Next when you are done

Select the two servers to add and finally update

After creation, select Load Balance again, click Load Balance to select the listener, click http:80, and select Edit

Delete the original forwarding to 443, select forwarding to the newly created 80, and finally save