a342c0bce3
modified: controllers/nginx/configuration.md modified: controllers/nginx/rootfs/etc/nginx/template/nginx.tmpl modified: core/pkg/ingress/annotations/authtls/main.go modified: core/pkg/ingress/controller/backend_ssl.go modified: core/pkg/ingress/controller/controller.go modified: core/pkg/ingress/controller/util_test.go modified: core/pkg/ingress/resolver/main.go modified: core/pkg/ingress/types.go modified: core/pkg/net/ssl/ssl.go modified: examples/PREREQUISITES.md new file: examples/auth/client-certs/nginx/README.md new file: examples/auth/client-certs/nginx/nginx-tls-auth.yaml
25 lines
651 B
YAML
25 lines
651 B
YAML
apiVersion: extensions/v1beta1
|
|
kind: Ingress
|
|
metadata:
|
|
annotations:
|
|
# Create this with kubectl create secret generic caingress --from-file=ca.crt --namespace=default
|
|
ingress.kubernetes.io/auth-tls-secret: "default/caingress"
|
|
ingress.kubernetes.io/auth-tls-verify-depth: "3"
|
|
kubernetes.io/ingress.class: "nginx"
|
|
name: nginx-test
|
|
namespace: default
|
|
spec:
|
|
rules:
|
|
- host: ingress.test.com
|
|
http:
|
|
paths:
|
|
- backend:
|
|
serviceName: http-svc:80
|
|
servicePort: 80
|
|
path: /
|
|
tls:
|
|
- hosts:
|
|
- ingress.test.com
|
|
# Create this cert as described in 'multi-tls' example
|
|
secretName: cert
|
|
|