配置HTTPS步骤:
1、准备域名证书文件(来自:openssl/cfssl工具自签或者权威机构颁发)
2、将证书文件保存到Secret
kubectl create secret tls \blog-aliangedu-cn --cert=blog.aliangedu.cn.pem --key=blog.aliangedu.cn-key.pem
3、Ingress规则配置tls
1、生成自签证书
先去生成证书,然后将证书放入kubectl的secret中,在代码中写明引用如下
![](https://img-blog.csdnimg.cn/31f60db4194f459d8e030d5b0a847312.png?x-oss-process=image/watermark,type_d3F5LXplbmhlaQ,shadow_50,text_Q1NETiBA5rGf5Y2X6YGT5Lq6,size_19,color_FFFFFF,t_70,g_se,x_16)
写入到yaml
apiVersion: networking.k8s.io/v1kind: Ingressmetadata:name: web1spec:ingressClassName: "nginx"tls:- hosts:- blog.aliangedu.cnsecretName: blog-aliangede-cnrules:- host: blog.aliangedu.cnhttp:paths:- path: /pathType: Prefixbackend:service:name: nginxport:number: 80
![](https://img-blog.csdnimg.cn/e8bc63ab60c343a5b86afc059cc47325.png?x-oss-process=image/watermark,type_d3F5LXplbmhlaQ,shadow_50,text_Q1NETiBA5rGf5Y2X6YGT5Lq6,size_20,color_FFFFFF,t_70,g_se,x_16)