Nginx Ingress 常见问题

annotations:
  # 只支持一条 rule - 可考虑拆分 ingress
  nginx.ingress.kubernetes.io/server-alias: '*.my-company.com'
  #ingress.kubernetes.io/server-alias: '*.my-company.com'

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: test-ingress
  annotations:
    nginx.ingress.kubernetes.io/use-regex: 'true'
spec:
  rules:
    - host: test.com
      http:
        paths:
          - path: /foo/.*
            backend:
              serviceName: test
              servicePort: 80

# HELM values
controller:
  extraArgs:
    enable-ssl-passthrough: true

annotations:
  nginx.ingress.kubernetes.io/ssl-passthrough: 'true'
  nginx.ingress.kubernetes.io/backend-protocol: 'HTTPS'
  kubernetes.io/ingress.allow-http: 'false'
  nginx.ingress.kubernetes.io/secure-backends: 'true'

# 相关配置
# https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/#backend-certificate-authentication
annotations:
  # 修改 SNI
  nginx.ingress.kubernetes.io/proxy-ssl-name: wener.me
  nginx.ingress.kubernetes.io/proxy-ssl-protocols: HTTPS