Traefik入口(Kubernetes)未接收letsencrypt证书
我已经用let'sencrypt ACME配置了Traefik(helm chart),但是我没有收到任何证书。Traefik入口在互联网的端口80和443上公开 特拉菲克Traefik入口(Kubernetes)未接收letsencrypt证书,kubernetes,traefik,traefik-ingress,Kubernetes,Traefik,Traefik Ingress,我已经用let'sencrypt ACME配置了Traefik(helm chart),但是我没有收到任何证书。Traefik入口在互联网的端口80和443上公开 特拉菲克 logLevel = "INFO" InsecureSkipVerify = true defaultEntryPoints = ["http","https"] [entryPoints] [entryPoints.http] address = ":80" compress = true [entryPo
logLevel = "INFO"
InsecureSkipVerify = true
defaultEntryPoints = ["http","https"]
[entryPoints]
[entryPoints.http]
address = ":80"
compress = true
[entryPoints.https]
address = ":443"
compress = true
[entryPoints.https.tls]
[[entryPoints.https.tls.certificates]]
CertFile = "/ssl/tls.crt"
KeyFile = "/ssl/tls.key"
[kubernetes]
[acme]
email = "email@email.com"
storage = "/acme/acme.json"
entryPoint = "https"
onHostRule = true
caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"
acmeLogging = true
[acme.httpChallenge]
entryPoint = "http"
[web]
address = ":8080"
以Traefik作为入口类的入口
{
"kind": "Ingress",
"apiVersion": "extensions/v1beta1",
"metadata": {
"name": "domain",
"namespace": "reverse-proxy",
"selfLink": "/apis/extensions/v1beta1/namespaces/reverse-proxy/ingresses/domain",
"uid": "550cdedc-ba77-11e8-8657-00155d00021a",
"resourceVersion": "6393921",
"generation": 5,
"creationTimestamp": "2018-09-17T12:43:52Z",
"annotations": {
"ingress.kubernetes.io/ssl-redirect": "true",
"kubernetes.io/ingress.class": "traefik"
}
},
"spec": {
"tls": [
{
"hosts": [
"domain.com"
],
"secretName": "cert" // without is also not working
}
],
"rules": [
{
"host": "domain.com",
"http": {
"paths": [
{
"backend": {
"serviceName": "domain",
"servicePort": 443
}
}
]
}
},
{
"host": "www.domain.com",
"http": {
"paths": [
{
"backend": {
"serviceName": "www-domain",
"servicePort": 443
}
}
]
}
}
]
},
"status": {
"loadBalancer": {}
}
}
我尝试使用http-01和tls-sni-01挑战。dns-01没有选项,因为我的dns提供商没有API。如何将letsencrypt配置注入traefik入口服务/守护程序 Traefik在Kubernetes Ingress文档上没有正式的letsencrypt。但这是一个错误。寻找“外部Traefik入口控制器”,您需要一个kv后端来存储您的证书
您还可以尝试与Traefik一起使用的方法。由于设置故障切换/冗余变得困难,目前不建议在Kubernetes上使用Traefik的内置ACME支持。正如Rico所提到的,Cert manager是一个更好的解决方案,也是Traefik团队目前推荐的解决方案:)Cert manager与Traefik配合良好,是推荐的解决方案。酷,将其添加到了答案中。谢谢。