部署一个有证书的ingress-nginx

字数统计: 266阅读时长: 1 min

 2018/09/25   Share

生成证书和secret

openssl genrsa -out tls.key 2048

openssl req -new -x509 -key tls.key -out tls.crt -subj /C=CN/ST=shanghai/L=shanghai/O=devops/CN=tomcat.test.com

kubectl create secret tls tomcat-ingress-secret --cert=tls.crt --key-tls.key

kubectl get secret

kubectl describe secret tomcat-ingress-secret

部署一个实例

vim tomcat-deploy.yaml

apiVersion: v1
kind: Service
metadata:
  name: tomcat
  namespace: default
spec:
  selector:
    app: tomcat
    release: canary
  ports:
  - name: http
    targetPort: 8080
    port: 8080
  - name: ajp
    targetPort: 8009
    port: 8009



---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: tomcat-deploy
  namespace: default
spec:
  replicas: 3
  selector:
    matchLabels:
      app: tomcat
      release: canary
  template:
    metadata:
      labels:
        app: tomcat
        release: canary
    spec:
      containers:
      - name: myapp
        image: tomcat:8.5.32-jre8-alpine
        ports:
        - name: http
          containerPort: 8080
        - name: ajp
          containerPort: 8009

部署一个有证书的ingress

vim ingress-tomcat-tls.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-tomcat-tls
  namespace: default
  annotations:
    kubernetes.io/ingress.class: "nginx"
spec:
  tls:
  - hosts:
    - tomcat.test.com
    secretName: tomcat-ingress-secret
  rules:
  - host: tomcat.test.com
    http:
      paths:
      - path:
        backend:
          serviceName: tomcat
          servicePort: 8080

应用这个yaml文件

1 2	kubectl apply -f tomcat-deploy.yaml kubectl apply -f ingress-tomcat-tls.yaml

查看这个部署的ingress

1	kubectl get ingress

访问pod

在windows下测试的话就编辑本地C:\Windows\System32\drivers\etc\hosts

把集群节点所在ip加上刚刚的tomcat.test.com

最后在浏览器中输入

https://tomcat.test.com:30443/

效果如下:

原文作者：HAOJX

原文链接：haojianxun.github.io/2018/09/25/部署一个有证书的ingress-nginx/

发表日期：September 25th 2018, 12:00:00 am

更新日期：October 13th 2022, 11:36:30 pm

Next Post

kubernetes调度pod策略
Previous Post

prometheus安装

CATALOG

1. 生成证书和secret
2. 部署一个实例
3. 部署一个有证书的ingress
4. 应用这个yaml文件
5. 查看这个部署的ingress
6. 访问pod



缺失模块。
1、请确保node版本大于6.2
2、在博客根目录（注意不是archer根目录）执行以下命令：
npm i hexo-generator-json-content --save
3、在根目录_config.yml里添加配置：

jsonContent:
  meta: false
  pages: false
  posts:
    title: true
    date: true
    path: true
    text: false
    raw: false
    content: false
    slug: false
    updated: false
    comments: false
    link: false
    permalink: false
    excerpt: false
    categories: true
    tags: true