Update Kubernetes
parent
05d5e1ea8b
commit
548842d4b0
@ -102,7 +102,7 @@ kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/
|
||||
By default it will issue fake, self signed certificates , but if your cluster is available directly form the internet you can issue let'sencrypt certs
|
||||
so we need to create a file
|
||||
```
|
||||
CapiVersion: cert-manager.io/v1
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: ClusterIssuer
|
||||
metadata:
|
||||
name: letsencrypt-prod
|
||||
@ -115,18 +115,14 @@ spec:
|
||||
solvers:
|
||||
- http01:
|
||||
ingress:
|
||||
class: internal-nginx
|
||||
podTemplate:
|
||||
spec:
|
||||
nodeSelector:
|
||||
"kubernetes.io/os": linux
|
||||
class: nginx
|
||||
```
|
||||
Customize and then apply it:
|
||||
```
|
||||
kubectl apply -f file.yml
|
||||
```
|
||||
|
||||
To issue valid certs you will need to add these toingress configs for your services
|
||||
To issue valid certs you will need to add these to ingress configs for your services
|
||||
|
||||
```
|
||||
...
|
||||
@ -205,6 +201,11 @@ kind: Ingress
|
||||
metadata:
|
||||
name: longhorn-ingress
|
||||
namespace: longhorn-system
|
||||
annotations:
|
||||
acme.cert-manager.io/http01-edit-in-place: "true"
|
||||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||||
ingress.kubernetes.io/ssl-redirect: "False"
|
||||
kubernetes.io/ingress.class: nginx
|
||||
spec:
|
||||
ingressClassName: nginx
|
||||
rules:
|
||||
@ -218,6 +219,10 @@ spec:
|
||||
name: longhorn-frontend
|
||||
port:
|
||||
number: 80
|
||||
tls:
|
||||
- hosts:
|
||||
- longhorn.my.cluster.com
|
||||
secretName: some-name-tls
|
||||
```
|
||||
|
||||
then apply it:
|
||||
|
Loading…
Reference in New Issue
Block a user