Kubernetes Ingress 与 cert-manager 自动 TLS 配置

Kubernetes Ingress 与 cert-manager 自动 TLS 配置ClusterIssuer 示例apiVersion: cert-manager.io/v1

kind: ClusterIssuer

metadata:

name: letsencrypt

spec:

acme:

server: https://acme-v02.api.letsencrypt.org/directory

email: [email protected]

privateKeySecretRef:

name: letsencrypt-key

solvers:

- http01:

ingress:

class: nginx

Ingress 配置apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

name: web

annotations:

cert-manager.io/cluster-issuer: letsencrypt

spec:

ingressClassName: nginx

tls:

- hosts: ["example.com"]

secretName: web-cert

rules:

- host: example.com

http:

paths:

- path: /

pathType: Prefix

backend:

service:

name: web

port:

number: 80

验证查看证书 Secret 与 Ingress 状态，确认 HTTPS 可用总结结合 cert-manager 与 Ingress，可自动化管理证书并为服务开启安全的 HTTPS 访问。