From f9e7ace997f1e60daa6d8d061c3249e75792ec3c Mon Sep 17 00:00:00 2001 From: DAI Mingchen Date: Mon, 4 Nov 2024 11:53:01 +0000 Subject: [PATCH 1/3] [Fix] change svc name --- deploy/k8s/step2-servers.yaml | 2 +- deploy/k8s/step3-ingress-gateway.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/k8s/step2-servers.yaml b/deploy/k8s/step2-servers.yaml index 5a8d849..f8aaefd 100644 --- a/deploy/k8s/step2-servers.yaml +++ b/deploy/k8s/step2-servers.yaml @@ -88,7 +88,7 @@ spec: kind: Service apiVersion: v1 metadata: - name: studio-devstar-server + name: backend-service namespace: studio-devstar-cn-ns spec: selector: diff --git a/deploy/k8s/step3-ingress-gateway.yaml b/deploy/k8s/step3-ingress-gateway.yaml index 4d5a370..e2e4470 100644 --- a/deploy/k8s/step3-ingress-gateway.yaml +++ b/deploy/k8s/step3-ingress-gateway.yaml @@ -16,6 +16,6 @@ spec: pathType: Prefix backend: service: - name: studio-devstar-server + name: backend-service port: number: 80 -- Gitee From cb3ae801f73fedeb57d5b0dcef3f7b7adc3048d2 Mon Sep 17 00:00:00 2001 From: DAI Mingchen Date: Mon, 4 Nov 2024 12:19:45 +0000 Subject: [PATCH 2/3] [Fix] Ingress TLS cert identifier --- deploy/k8s/step3-ingress-gateway.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/deploy/k8s/step3-ingress-gateway.yaml b/deploy/k8s/step3-ingress-gateway.yaml index e2e4470..d09a4cd 100644 --- a/deploy/k8s/step3-ingress-gateway.yaml +++ b/deploy/k8s/step3-ingress-gateway.yaml @@ -19,3 +19,12 @@ spec: name: backend-service port: number: 80 + tls: + # 注意：配置下列 TLS 证书时候，需要从证书签发目录执行下列命令： + # 1. 删除过期 SSL 证书： + # $ kubectl delete secret -n studio-devstar-cn-ns studio-devstar-cn-ssl-secret + # 2. 从腾讯云控制台新签发的 TLS 证书创建 TLS 密钥： + # $ kubectl create secret tls -n studio-devstar-cn-ns studio-devstar-cn-ssl-secret --cert=studio.devstar.cn_bundle.crt --key=studio.devstar.cn.key + - hosts: + - studio.devstar.cn + secretName: studio-devstar-cn-ssl-secret -- Gitee From ddfe79bfacdb5f258c779c496f12e6ddfcb3c16b Mon Sep 17 00:00:00 2001 From: DAI Mingchen Date: Mon, 4 Nov 2024 12:31:19 +0000 Subject: [PATCH 3/3] [Optimization] enforce HTTPS --- deploy/k8s/step3-ingress-gateway.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/deploy/k8s/step3-ingress-gateway.yaml b/deploy/k8s/step3-ingress-gateway.yaml index d09a4cd..0ded7ce 100644 --- a/deploy/k8s/step3-ingress-gateway.yaml +++ b/deploy/k8s/step3-ingress-gateway.yaml @@ -6,6 +6,8 @@ apiVersion: networking.k8s.io/v1 metadata: name: studio-devstar-ingress namespace: studio-devstar-cn-ns + annotations: + nginx.ingress.kubernetes.io/ssl-redirect: "true" spec: ingressClassName: nginx rules: -- Gitee