kubernetes 是否有一种方法可以将EKS服务配置为使用HTTPS？

chhkpiq4 于 2023-08-03 发布在 Kubernetes

关注(0)|答案(3)|浏览(116)

下面是我们当前EKS服务的配置：

apiVersion: v1
kind: Service
metadata:
  labels:
    app: main-api
  name: main-api-svc
  annotations:
    service.beta.kubernetes.io/aws-load-balancer-type: nlb
spec:
  externalTrafficPolicy: Cluster
  ports:
    - name: http-port
      port: 80
      protocol: TCP
      targetPort: 80
  selector:
    app: main-api
  sessionAffinity: None
  type: LoadBalancer

字符串
有没有办法将其配置为使用HTTPS而不是HTTP？

kubernetes

来源：https://stackoverflow.com/questions/56534589/is-there-a-way-to-configure-an-eks-service-to-use-https

3条答案

按热度按时间

oo7oh9g91#

要终止Amazon Elastic Kubernetes Service上的HTTPS流量并将其传递到后端，请执行以下操作：

[Request a public ACM certificate](https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-request-public.html)  for your custom domain.

Identify the ARN of the certificate that you want to use with the load balancer's HTTPS listener.
然后，编辑注解以提供步骤2中的ACM ARN。 Then, edit the annotations to provide the ACM ARN from step 2.

apiVersion: v1
kind: Service
metadata:
  name: echo-service
  annotations:
    # Note that the backend talks over HTTP.
    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
    # TODO: Fill in with the ARN of your certificate.
    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:{region}:{user id}:certificate/{id}
    # Only run SSL on the port named "https" below.
    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "https"

spec:
  type: LoadBalancer
  selector:
    app: echo-pod
  ports:
  - name: http
    port: 80
    targetPort: 8080
  - name: https
    port: 443
    targetPort: 8080

字符串
4. To create aServiceobject, run the following command:

$ kubectl create -f service.yaml

型
5. To return the DNS URL of the service of typeLoadBalancer, run the following command:

$ kubectl get service

型

注意：如果集群中有很多活动服务运行，请确保从命令输出中获取正确类型为LoadBalancer的服务的URL。

Open the Amazon EC2 console , and then chooseLoad Balancers.
Select your load balancer, and then chooseListeners.
ForListener ID, confirm that your load balancer port is set to443.
ForSSL Certificate, confirm that the SSL certificate that you defined in the YAML file is attached to your load balancer.
Associate your custom domain name with your load balancer name.
Finally, In a web browser, test your custom domain with the following HTTPS protocol: