k8s-nginx-ingress-3

ingress HTTPS代理访问：

创建证书，以及cert存储方式:

openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=nginxsvc/O=nginxsvc"

kubectl create secret tls tls-secret --key tls.key --cert tls.crt

deployment3.yaml

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: deployment-3
spec:
replicas: 2
template:
metadata:
labels:
name: nginx3
spec:
containers:
- name: nginx
image: nginx:v1
imagePullPolicy: IfNotPresent
ports:
- containerPort: 80
---
apiVersion: v1
kind: Service
metadata:
name: svc-3
spec:
ports:
- port: 80
targetPort: 80
protocol: TCP
selector:
name: nginx3

https.ingress.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: https
spec:
tls:
- hosts:
- www3.kk.com
secretName: tls-secret
rules:
- host: www3.kk.com
http:
paths:
- path: /
backend:
serviceName: svc-3
servicePort: 80

创建：

kubectl apply  -f deployment3.yaml
kubectl apply  -f https.ingress.yaml

查看端口：

[root@apiserver https]# kubectl get svc -n ingress-nginx
NAME            TYPE       CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
ingress-nginx   NodePort   10.110.60.132   <none>        80:31866/TCP,443:30271/TCP   7h48m

用https协议访问：
https://www3.kk.com:30271/
注意：80端口用http协议
443端口用https协议

• 点赞
• 收藏
• 分享
• 文章举报