ingress.yaml:
---
kind: Service
apiVersion: v1
metadata:
labels:
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kubernetes-dashboard
spec:
ports:
- name: https
port: 8443
targetPort: 8443
selector:
k8s-app: kubernetes-dashboard
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: dashboard
namespace: kubernetes-dashboard
annotations:
# 从nginx访问后端的svc,采用 https 协议
nginx.org/ssl-services: kubernetes-dashboard
spec:
ingressClassName: nginx
rules:
- host: dashboard.huanle.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: kubernetes-dashboard
port:
name: https
# 没指定 secretName时使用默认泛域名证书,通过IC命令行参数 -wildcard-tls-secret 指定
# 指定 tls 后,http协议会被重定向为https: return 301 https://$host:443$request_uri;
tls:
- hosts:
- dashboard.huanle.com