Add support in ingress for multiple domains+custom ssl certs and domain -> pod rules

[sandys]

I have multiple subdomains (part of a wildcard tld) as well as multiple TLD coming in to my cluster.

For compliance reasons, i have to use certificates issued by a CA - both wildcard and single domain. I cannot use letsencrypt.

What is the k3s configuration i need for the inbuilt traefik to pick these certificates and then route the domains to the right pods ?

[vnwarrior]

also commentng here. we also want similar help

[mortenlj]

Just another user here, but I think the default traefik configuration doesn't allow for the setup you need.

Instead you should use the --no-deploy=traefik option and supply your own traefik manifest, where you can configure Traefik as you want (just see the documentation for the traefik helm chart: https://github.com/helm/charts/tree/master/stable/traefik).

If you don't know where to start, take a copy of the currently generated traefik manifest in /var/lib/rancher/k3s/server/manifests before changing the startup script, and adapt to your liking (that's what I did).

[sandys]

@mortenlj yes - which is pretty much k8s territory.

This issue is basically trying to highlight that this is a baseline feature that should be done by the k3s cli in some way. Because this is such a fundamental, yet superhard to setup thing in kubernetes. I dont want to figure out traefik and spend time learning traefik.

I'm requesting the developers to give me a way to auto-configure it using k3s cli. Otherwise we are basically back into k8s complexity.

[caroline-suse-rancher]

Closing due to age - please open new issues as problems arise.