创建测试证书
openssl genrsa -out nginx.key 2048
openssl req -new -x509 -key nginx.key -out nginx.crt -subj /C=CN/ST=Beijing/L=Beijing/O=ssltest/CN=www.test.com
其中CN=www.test.com
为想要访问的域名
创建secret
kubectl create secret tls nginx-secret --cert=nginx.crt --key=nginx.key
编写ingress yaml文件
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
name: nginx-ingress
spec:
tls:
- hosts:
- www.test.com
secretName: nginx-secret
rules:
- host: www.test.com
http:
paths:
- path: /
backend:
serviceName: nginx
servicePort: 80
验证
解析node主机域名问www.test.com然后在浏览器中访问