如何在使用ingress nginx的同时在Google Kubernetes引擎上启用SSL

Question

我正在使用带有ingress nginx的GKE(https://kubernetes.github.io/ingress-nginx/)。我尝试了许多使用cert-manager的教程，但都没能学会。如果你能在谷歌kubernetes引擎中使用ingress nginx获得SSL，你能给我一个yaml文件作为例子吗？

您可以将此作为起点并在此基础上展开

apiVersion: apps/v1
kind: Deployment
metadata:
name: arecord-depl
spec:
replicas: 1
selector:
matchLabels:
app: arecord
template:
metadata:
labels:
app: arecord
spec:
containers:
- name: arecord
image: gcr.io/clear-shell-346807/arecord
ports:
- containerPort: 8080
env:
- name: PORT
value: "8080"
---
apiVersion: v1
kind: Service
metadata:
name: arecord-srv
spec:
selector:
app: arecord
ports:
- name: arecord
protocol: TCP
port: 8080
targetPort: 8080
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: echo-ingress
annotations:
kubernetes.io/ingress.class: "gce"
kubernetes.io/ingress.global-static-ip-name: ssl-ip
spec:
tls:
- hosts:
- vareniyam.me
secretName: echo-tls
rules:
- host: vareniyam.me
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: arecord-srv
port:
number:
8080

Answer 1

1. 您说过您使用的是nginx ingress，但您的ingress类说的是gce：

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: echo-ingress
annotations:
kubernetes.io/ingress.class: "gce"

2. 您尚未指明要使用哪个ClusterIssuer或Issuer。证书管理器只有在您告诉它您希望它创建证书后才会颁发证书

我不确定您尝试过哪些教程，但您是否尝试过查看此处的证书管理器文档：https://cert-manager.io/docs/