ssl - 使用 Traefik 在 K8S Ingress 上设置 TLS

Question

我的设置与 user guide 没有太大区别与 k8s 一起使用。出于某种原因，我只能访问 http://app.minikube 而不能访问 https://app.minikube。

有人可以看看我的设置，看看我明显遗漏了什么吗？

apiVersion: v1
kind: Service
metadata:
 name: myapp
 labels:
   app: myapp
spec:
 ports:
 - name: http
   port: 80
   targetPort: 7777
 selector:
   app: myapp
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
 name: myingress
 annotations:
   kubernetes.io/ingress.class: traefik
spec:
 rules:
 - host: app.minikube
   http:
     paths:
     - path: /
       backend:
         serviceName: myapp
         servicePort: http
 tls:
  - secretName: mytls

仅供引用，根据 Traefik user guide , tls 中的 hosts 定义是不需要的，这就是我将其省略的原因。

The field hosts in the TLS configuration is ignored. Instead, the domains provided by the certificate are used for this purpose. It is recommended to not use wildcard certificates as they will match globally)

Answer 1

您缺少 hosts 部分:

  tls:
  - hosts:
    - my-host.example.com
    secretName: my-secret