我已从 name.com 获得证书。
\n\xe2\x9e\x9c tree . \n.\n\xe2\x94\x9c\xe2\x94\x80\xe2\x94\x80 ca.crt\n\xe2\x94\x9c\xe2\x94\x80\xe2\x94\x80 vpk.crt\n\xe2\x94\x9c\xe2\x94\x80\xe2\x94\x80 vpk.csr\n\xe2\x94\x94\xe2\x94\x80\xe2\x94\x80 vpk.key\nRun Code Online (Sandbox Code Playgroud)\n我是如何创造秘密的
\n我在 vpk.crt 文件末尾添加了 ca.crt 内容。
\n(\xe2\x8e\x88 | vpk-dev-eks:argocd)\n\xe2\x9e\x9c k create secret tls tls-secret --cert=vpk.crt --key=vpk.key --dry-run -o yaml | kubectl apply -f -\n\n(\xe2\x8e\x88 | vpk-dev-eks:argocd)\n\xe2\x9e\x9c kubectl create secret generic ca-secret --from-file=ca.crt=ca.crt --dry-run -o yaml | kubectl apply -f -\nRun Code Online (Sandbox Code Playgroud)\n这是我的入口:
\napiVersion: networking.k8s.io/v1beta1\nkind: Ingress\nmetadata:\n name: websockets-ingress\n namespace: development\n annotations:\n kubernetes.io/ingress.class: "nginx"\n nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"\n nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"\n # Enable client certificate authentication\n nginx.ingress.kubernetes.io/auth-tls-verify-client: "optional_no_ca"\n # …Run Code Online (Sandbox Code Playgroud)