28 lines
895 B
YAML
28 lines
895 B
YAML
apiVersion: networking.k8s.io/v1
|
||
kind: Ingress
|
||
metadata:
|
||
name: longhorn-ingress
|
||
namespace: longhorn-system # 注意：Longhorn 安装在这个命名空间
|
||
annotations:
|
||
# 1. 告诉 Cert-Manager：请用这个发证机构给我发证
|
||
cert-manager.io/cluster-issuer: letsencrypt-prod
|
||
# (可选) 强制 Traefik 使用 HTTPS 入口，但这行通常不需要，Traefik 会自动识别 TLS
|
||
# traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
||
spec:
|
||
rules:
|
||
- host: storage.u9.net3w.com # 您的域名
|
||
http:
|
||
paths:
|
||
- path: /
|
||
pathType: Prefix
|
||
backend:
|
||
service:
|
||
name: longhorn-frontend
|
||
port:
|
||
number: 80
|
||
# 2. 告诉 K3s：证书下载下来后，存在哪里
|
||
tls:
|
||
- hosts:
|
||
- storage.u9.net3w.com
|
||
secretName: longhorn-tls-secret # 证书会自动保存在这个 Secret 里
|