添加证书

kubectl create secret tls 证书名称 --cert=crt文件路径 --ker=key文件路径 -n命名空间
kubectl create secret tls https-test --cert=tls.crt --key=tls.key -n test

ingress配置使用tls

修改entrypoints绑定端口，改为https端口websecure
增加配置启用tls
traefik.ingress.kubernetes.io/router.tls: "true"
定义tls配置
spec:
  tls:
  - secretName: https-test

kind: Ingress
apiVersion: networking.k8s.io/v1beta1
metadata:
  name: hbase-web-nginx
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure  
    #启用tls
    traefik.ingress.kubernetes.io/router.tls: "true"    
spec:
  tls:
  - secretName: https-test
  rules:
    - host: test.ddtest.com
      http:
        paths:
          - path: /hbase/
            backend:
              serviceName: hbase-web-nginx
              servicePort: 9909
          - path: /static/
            backend:
              serviceName: hbase-web-nginx
              servicePort: 9909

使用https访问

https://域名:traefik—service-https-端口/

nginx-ingress配置https

添加证书

同traefikingress

ingress配置

增加tls配置
spec:
  tls:
  - hosts: 
    - test.ddtest.com
    secretName: tomcat-ingress-secret

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/configuration-snippet: >-
      gzip on; gzip_min_length 1024; gzip_buffers 16 8k; gzip_comp_level 9;
      gzip_types text/plain application/x-javascript text/css application/xml
      image/jpeg image/gif image/png; gzip_disable "MSIE 6\.";
    nginx.ingress.kubernetes.io/proxy-connect-timeout: '600'
    nginx.ingress.kubernetes.io/proxy-read-timeout: '600'
    nginx.ingress.kubernetes.io/proxy-send-timeout: '600'
  name: ingress-nginx  
spec:
  tls:
  - hosts: 
    - test.ddtest.com
    secretName: tomcat-ingress-secret
  rules:
  - host: test.ddtest.com
    http:
      paths:  
      - backend:
          serviceName: fms
          servicePort: 80
        path: /fms/