apiVersion: networking.k8s.io/v1 kind: Ingress metadata: namespace: xxx name: xxx-web annotations: # 文件上传限制 nginx.ingress.kubernetes.io/proxy-body-size: "200M" nginx.ingress.kubernetes.io/backend-protocol: HTTPS spec: ingressClassName: nginx rules: - host: www.xxx.net http: paths: - path: / pathType: Prefix backend: service: name: xxx-web port: number: 443
https://kubernetes.io/zh-cn/docs/concepts/services-networking/ingress/
kubectl create secret tls xxx-secret --cert=xxx.crt --key=xxx.key
apiVersion: networking.k8s.io/v1 kind: Ingress metadata: namespace: xxx name: xxx-web annotations: # 文件上传限制 nginx.ingress.kubernetes.io/proxy-body-size: "200M" nginx.ingress.kubernetes.io/backend-protocol: HTTPS spec: ingressClassName: nginx tls: - hosts: - www.xxx.net secretName: xxx-secret rules: - host: www.xxx.net http: paths: - path: / pathType: Prefix backend: service: name: xxx-web port: number: 443
apiVersion: networking.k8s.io/v1 kind: Ingress metadata: namespace: xxx name: xxx-web annotations: # 代理发送超时 nginx.ingress.kubernetes.io/proxy-send-timeout: "3600" # 代理读取超时 nginx.ingress.kubernetes.io/proxy-read-timeout: "3600" # 代理连接超时 nginx.ingress.kubernetes.io/proxy-connect-timeout: "3600" # 基于客户端出口ip哈希 nginx.ingress.kubernetes.io/upstream-hash-by: "$http_x_forwarded_for" spec: ingressClassName: nginx rules: - host: www.xxx.net http: paths: - path: / pathType: Prefix backend: service: name: xxx-web port: number: 443