K8S 部署 ingress-nginx (三) 启用 https

部署 https 证书

cd ~/ingress

# 生成私钥 tls.key, 密钥位数是 2048
openssl genrsa -out tls.key 2048

# 使用 tls.key 生成自签证书
openssl req -new -x509 -key tls.key -out tls.crt -subj /C=CN/ST=GuangDong/L=Guangzhou/O=DevOps/CN=tomcat.klvchen.com

kubectl create secret tls tomcat-ingress-secret --cert=tls.crt --key=tls.key 
kubectl get secret
kubectl describe secret tomcat-ingress-secret

vi ingress-tomcat-tls.yaml 
# 内容为
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-tomcat-tls
  namespace: default
  annotations:
    kubernetes.io/ingress.class: "nginx"
spec:
  tls:
  - hosts: 
    - tomcat.klvchen.com
    secretName: tomcat-ingress-secret
  rules:
  - host: tomcat.klvchen.com
    http:
      paths:
      - path:
        backend:
          serviceName: tomcat
          servicePort: 8080


kubectl apply -f ingress-tomcat-tls.yaml 

kubectl get ingress
kubectl describe ingress ingress-tomcat-tls

# 浏览器访问
https://tomcat.klvchen.com:30443/