Skip to content

Latest commit

 

History

History
72 lines (53 loc) · 1.73 KB

README.md

File metadata and controls

72 lines (53 loc) · 1.73 KB
Raw

kube-lego example

Create namespaces

# echoserver
kubectl apply -f echoserver/00-namespace.yaml
# kube-lego
kubectl apply -f lego/00-namespace.yaml
# nginx-ingress
kubectl apply -f nginx/00-namespace.yaml

Create a default http backend

kubectl apply -f nginx/default-deployment.yaml
kubectl apply -f nginx/default-service.yaml

Create nginx ingress

kubectl apply -f nginx/configmap.yaml
kubectl apply -f nginx/service.yaml
kubectl apply -f nginx/deployment.yaml

The nginx service uses a LoadBalancer to publish the service. A few minutes after you have added the nginx service, you will get it's public IP address or domain via kubectl:

kubectl describe svc nginx --namespace nginx-ingress
[...]
LoadBalancer Ingress:   1.2.3.4
[...]

This is the IP address where you have to point your domains to. IN AWS you will get a domain, use a CNAME record in this case.

Create an example app (echoserver)

kubectl apply -f echoserver/service.yaml
kubectl apply -f echoserver/deployment.yaml
kubectl apply -f echoserver/ingress-notls.yaml

Enable kube-lego

kubectl apply -f lego/configmap.yaml
kubectl apply -f lego/deployment.yaml
  • Change the email address in kube-lego-configmap.yaml before creating the kubernetes resource
  • Please be aware that kube-lego creates it's related service on its own

Enable tls for echoserver ingress

kubectl apply -f echoserver/ingress-tls.yaml

Get debug information

  • Look at the log output of the nginx pod
  • Look at the log output of the ingress pods
  • Sometimes after acquiring a new certifiacte nginx needs to be restarted (as it's not watching change events for secrets)