Add TLS termination

kzh · May 30, 2020 · 8127e5c · 8127e5c
1 parent 75f9f44
commit 8127e5c
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/kubernetes/helm/traefik.yaml b/kubernetes/helm/traefik.yaml
@@ -21,8 +21,9 @@ ports:
 
 additionalArguments:
   - "--entryPoints.web.address=:8000"
-  - "--entryPoints.websecure.address=:8443"
   - "--entryPoints.web.http.redirections.entryPoint.to=:443"
+  - "--entryPoints.websecure.address=:8443"
+  - "--entryPoints.websecure.http.tls"
   - "--accesslog"
   - "--api.dashboard"
   - "--api.insecure"

diff --git a/kubernetes/resources/pong.yaml b/kubernetes/resources/pong.yaml
@@ -43,6 +43,7 @@ apiVersion: extensions/v1beta1
 kind: Ingress
 metadata:
   annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
     cert-manager.io/cluster-issuer: letsencrypt-prod
   name: pong
   namespace: pong
@@ -51,10 +52,10 @@ spec:
   - host: ping.kzh.dev
     http:
       paths:
-      - backend:
+      - path: /
+        backend:
           serviceName: pong
-          servicePort: 80
-        path: /
+          servicePort: pong-http
   tls:
   - hosts:
     - ping.kzh.dev