K8S ingress多域名HTTPS

环境说明: K8S 1.23.1      ingress: 1.3.1    命名空间采用默认的default

目前环境中有www.a.com、www.a.cn访问的后端服务都是www-svc(默认已创建好)

申请了www.a.com的域名证书为www.a.com.key,www.a.com.cer

申请了www.b.com的域名证书为www.b.com.key,www.b.com.cer

申请了www.c.com的域名证书为www.c.com.key,www.c.com.cer

#创建一个名称为www.a.com的secret
kubectl create secret tls www.a.com --key www.a.com.key --cert www.a.com.cer
#创建一个名称为www.b.com的secret
kubectl create secret tls www.b.com --key www.b.com.key --cert www.b.com.cer
#创建一个名称为www.c.com的secret
kubectl create secret tls www.c.com --key www.c.com.key --cert www.c.com.cer

2.创建ingress

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: www
  namespace: default
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/server-alias: "www.b.com,www.c.com"
spec:
  rules:
  - host: www.a.com
    http: &http_rules
      paths:
      - backend:
          service:
            name: www-svc
            port:
              number: 80
        path: /
        pathType: ImplementationSpecific
  - host: www.b.com
    http: *http_rules
  - host: www.c.com
    http: *http_rules
  tls:
    - hosts:
        - www.a.com
      secretName: www.a.com
    - hosts:
        - www.b.com
      secretName: www.b.com
    - hosts:
        - www.c.com
      secretName: www.c.com