[KUBERNETES] nginx-ingress ssl 적용


1. secret 생성

1
kubectl create secret tls test-secret --key _test_SHA256WITHRSA.key --cert test_ssl.crt

2. ingress rule 수정

  • default-back-end-service.yaml
    apiVersion: extensions/v1beta1
    kind: Ingress
    metadata:
    name: nginx-ingress
    namespace: default
    spec:
    tls:
    - hosts:
      - www.test.com
      - m.test.com
      secretName: test-secret
    rules:
    - host: [svc1 도메인]
      http:
        paths:
        - backend:
            serviceName: backend-svc-1
            servicePort: 80
    - host: [svc2 도메인]
      http:
        paths:
        - backend:
            serviceName: backend-svc-2
            servicePort: 80
    - host: [통합 도메인]
      http:
        paths:
        - path: /svc1
          backend:
            serviceName: backend-svc-1
            servicePort: 80
        - path: /svc2
          backend:
            serviceName: backend-svc-2
            servicePort: 80
        - path: /nginx_status
          backend:
            serviceName: nginx-ingress-nodeport
            servicePort: 18080
    

공유