Rancher 2.x - HTTP到HTTPS的重定向。

Question

我安装了Rancher 2.4.4，使用的是 文件 并且一切都在工作。我可以使用我的自定义域名使用https访问服务器 rancher.mydomain.com.

我创建了一个Ingress，使用 test.mydomain.com 来访问一项服务。我正在使用自签证书来测试 https:/test.mydomain.com。 访问，并且它正在工作。但我可以使用http访问相同的服务。我如何进行重定向或避免使用http访问我的集群？这是有敏感信息改变的入口。

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    field.cattle.io/creatorId: user-tk7hh
    field.cattle.io/ingressState: '{"dW5pbWVk":"p-pfqlz:test","abc":"deployment:test:httpbin","abc==":"deployment:test:httpbin"}'
    field.cattle.io/publicEndpoints: '[{"addresses":["1.2.3.4"],"port":443,"protocol":"HTTPS","serviceName":"unimed:ingress-5d3e64b41895cfc7d3d354d63a7d83d0","ingressName":"test:test","hostname":"test.mydomain.com","path":"/status","allNodes":false},{"addresses":["1.2.3.4"],"port":443,"protocol":"HTTPS","serviceName":"test:ingress-9922b5a9032d962093476e63c4335d80","ingressName":"test:test","hostname":"test.mydomain.com","path":"/delay","allNodes":false}]'
  creationTimestamp: "2020-06-05T23:28:23Z"
  generation: 11
  labels:
    cattle.io/creator: norman
  managedFields:
  - apiVersion: extensions/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:loadBalancer:
          f:ingress: {}
    manager: traefik
    operation: Update
    time: "2020-06-05T23:28:23Z"
  - apiVersion: extensions/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:field.cattle.io/creatorId: {}
          f:field.cattle.io/ingressState: {}
          f:field.cattle.io/publicEndpoints: {}
        f:labels:
          .: {}
          f:cattle.io/creator: {}
      f:spec:
        f:rules: {}
        f:tls: {}
    manager: Go-http-client
    operation: Update
    time: "2020-06-08T19:22:11Z"
  name: unimed
  namespace: unimed
  resourceVersion: "998963"
  selfLink: /apis/extensions/v1beta1/namespaces/test/ingresses/test
  uid: b138da9d-9ca8-4a23-a9b9-3ae1e400177d
spec:
  rules:
  - host: test.mydomain.com
    http:
      paths:
      - backend:
          serviceName: ingress-5d3e64b41895cfc7d3d354d63a7d83d0
          servicePort: 80
        path: /status
        pathType: ImplementationSpecific
      - backend:
          serviceName: ingress-9922b5a9032d962093476e63c4335d80
          servicePort: 80
        path: /delay
        pathType: ImplementationSpecific
  tls:
  - hosts:
    - test.mydomain.com
    secretName: test
status:
  loadBalancer:
    ingress:
    - ip: 1.2.3.4

Answer 1

解决了。Rancher 2.4.4使用Traefik作为负载均衡器。我们需要把这个注释，使一个重定向。

traefik.ingress.kubernetes.io/redirect-entry-point: https

可以在Ingress中使用接口进行。