K8S部署ingress-nginx配置https

mkdir cert && cd cert

openssl genrsa -out tls.key 2048

openssl req -new -x509 -key tls.key -days 10000 -out tls.crt -subj /C=CN/ST=GuangDong/L=Guangzhou/O=DevOps/CN=boss.pcidata.com

kubectl create secret tls boss-ingress-secret --cert=tls.crt --key=tls.key
kubectl get secret
kubectl describe secret boss-ingress-secret

vi ingress-boss-tls.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-boss-tls
  namespace: default
  annotations:
    kubernetes.io/ingress.class: "nginx"
spec:
  tls:
  - hosts:
    - boss.pcidata.com
    secretName: boss-ingress-secret
  rules:
  - host: boss.pcidata.com
    http:
      paths:
      - path:
        backend:
          serviceName: sscp-page-management-svc
          servicePort: 9100

kubectl apply -f ingress-boss-tls.yaml

kubectl get ingress
kubectl describe ingress ingress-boss-tls

https://boss.pcidata.com/#/