k8s-nginx-ingress-3

ingress HTTPS代理访问：

创建证书，以及cert存储方式:

openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=nginxsvc/O=nginxsvc"

kubectl create secret tls tls-secret --key tls.key --cert tls.crt

deployment3.yaml

apiVersion: extensions/v1beta1
kind: Deployment
metadata: 
  name: deployment-3
spec: 
  replicas: 2
  template: 
    metadata: 
      labels: 
        name: nginx3
    spec:
      containers:
        - name: nginx
          image: nginx:v1
          imagePullPolicy: IfNotPresent
          ports: 
            - containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
  name: svc-3
spec:
  ports:
    - port: 80
      targetPort: 80
      protocol: TCP
  selector:
    name: nginx3

https.ingress.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata: 
  name: https
spec:
  tls: 
    - hosts:
       - www3.kk.com
      secretName: tls-secret
  rules:
    - host: www3.kk.com
      http:
       paths:
        - path: /
          backend: 
            serviceName: svc-3
            servicePort: 80

创建：

kubectl apply  -f deployment3.yaml
kubectl apply  -f https.ingress.yaml

查看端口：

[root@apiserver https]# kubectl get svc -n ingress-nginx 
NAME            TYPE       CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
ingress-nginx   NodePort   10.110.60.132   <none>        80:31866/TCP,443:30271/TCP   7h48m

用https协议访问：
https://www3.kk.com:30271/

注意：
80端口用http协议 www3.kk.com:30271访问会报400
443端口用https协议 一定要用https://www3.kk.com:30271/访问