MENU

K3s使用Let's Encrypt签发SSL证书(转)

March 29, 2023 • 默认分类

安装 cert-manager

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.9.1/cert-manager.yaml

Issuer

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  namespace: cert-manager
  name: letsencrypt
spec:
  acme:
    email: <YOUR EMAIL> # replace this
    privateKeySecretRef:
      name: prod-issuer-account-key
    server: https://acme-v02.api.letsencrypt.org/directory
    solvers:
      - http01:
          ingress:
            class: traefik
        selector: {}

Ingress

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  namespace: abc-namespace
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt
  name: abc-web
spec:
  tls:
  - secretName: abc-web-tls
    hosts:
      - abc.efg.com
  # ingressClassName: traefik
  rules:
  - host: abc.efg.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: abc-web
            port:
              number: 80
Archives QR Code
QR Code for this page
Tipping QR Code