我为提供SSL证书的GKE集群创建了一个入口。现在,入口显示了两个IP附件,一个带有带有端口的HTTP :80和一个带有端口443的HTTPS。问题是,当访问HTTPS时,仍然显示不安全。我创建这个图表是为了解释我的体系结构。非常感谢您的任何建议。https://docs.google.com/drawings/d/1JLTlIFwwxNN7NK66dxM6rqhIOUQukVuFvMTRx7UGPK4/edit
这里的YAML
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
ingress.kubernetes.io/backends: '{"k8s-be-XXXXX--XXXXXXXXXXXXXXXX":"HEALTHY"}'
ingress.kubernetes.io/forwarding-rule: k8s-fw-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/https-forwarding-rule: k8s-fws-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/https-target-proxy: k8s-tps-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/ssl-cert: k8s-ssl-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/static-ip: k8s-fw-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/target-proxy: k8s-tp-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/url-map: k8s-um-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
creationTimestamp: "2020-10-14T05:58:37Z"
finalizers:
- networking.gke.io/ingress-finalizer
generation: 1
name: XXXXXXXXXXXXXXXX-ingress
namespace: XXXXXXXXXXXXXXXX
resourceVersion: "XXXXXXXXXXXXXXXX"
selfLink: /apis/extensions/v1beta1/namespaces/XXXXXXXXXXXXXXXX/ingresses/XXXXXXXXXXXXXXXX-ingress
uid: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
spec:
backend:
serviceName: XXXXXXXXXXXXXXXX-service
servicePort: 80
tls:
- secretName: XXXXXXXXXXXXXXXX-certificate
status:
loadBalancer:
ingress:
- ip: XXXXXXXXXXXXXXXX
发布于 2020-10-26 08:41:22
张贴这作为一个社区的答复与总结我们的意见,以更好的能见度。
Https对gke的入口不起作用。
这里的答案是等待,因为负载平衡器可能需要几分钟才能正常工作。
如@robimalco所述
我得等几分钟才能得到HTTPS。这是我跟踪的教程
以上教程的第3点也指出了这一点。
注:负载平衡器可能需要10-20分钟才能开始工作。
https://serverfault.com/questions/1038741
复制相似问题