"Kubernetes Ingress 与 cert-manager 自动 TLS 配置"

Kubernetes Ingress 与 cert-manager 自动 TLS 配置ClusterIssuer 示例apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt spec: acme: server: https://acme-v02.api.letsencrypt.org/directory email: [email protected] privateKeySecretRef: name: letsencrypt-key solvers: - http01: ingress: class: nginx Ingress 配置apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: web annotations: cert-manager.io/cluster-issuer: letsencrypt spec: ingressClassName: nginx tls: - hosts: ["example.com"] secretName: web-cert rules: - host: example.com http: paths: - path: / pathType: Prefix backend: service: name: web port: number: 80 验证查看证书 Secret 与 Ingress 状态，确认 HTTPS 可用总结结合 cert-manager 与 Ingress，可自动化管理证书并为服务开启安全的 HTTPS 访问。