Kubernetes ingress SSL 인증서 적용

@ 사설키 생성 예시
                                                                                                    키이름         키이름

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=kube-book.com"

Generating a RSA private key

==========================================================================================

 

SSL 쿠버네티스 시크릿 키 생성

                              키이름        (와일드키)   (와일드crt)

# kubectl create secret tls tlssecret --key tls.key --cert tls.crt

   키이름 ex: xxxx2022, xxxx2023 . .. . . .

 

# kubectl get secrets

 

 

 

 

@@ 키적용

 

# cat ingress-tomcat-ssl.yaml

 

apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

  name: tomcat-service-ingress

  annotations:

    nginx.ingress.kubernetes.io/rewrite-target: /

#    nginx.ingress.kubernetes.io/permanent-redirect: http://erp.tomcat.com:30080$request_uri

spec:

  ingressClassName: nginx

  rules:

    - host: tomcat.com

      http:

        paths:

          - pathType: Prefix

            path: "/"

            backend:

              service:

                name: tomcat-service

                port:

                  number: 8080

          - pathType: Prefix

            path: "/erp"

            backend:

              service:

                name: erp-service

                port:

                  number: 8080

  tls:

    - hosts:

        - tomcat.com

      secretName: tlssecret          # xxxx2022, xxxx2023 등...