Kubernetes 签发 Ingress 证书及日常故障运维

1. 自动签发 Ingress 证书

  • 安装 cert-manager
  •  1
     2
     3
     4
     5
     6
     7
     8
     9
    10
    
    kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml
    kubectl create namespace cert-manager
    kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true
    helm repo add jetstack https://charts.jetstack.io
    helm repo update
    helm install \
      --name cert-manager \
      --namespace cert-manager \
      --version v0.10.0 \
      jetstack/cert-manager
    
  • 创建一个全局的签发机构