Score:0

rke2 ingress-nginx default ssl certificate

ng flag

I asked this here yesterday.

Can anyone advise how to apply the default ssl certificate to ingress-nginx on rke2?

I followed the doc at https://docs.rke2.io/networking/#nginx-ingress-controller
I imported the TLS certificate into a secret
I created this file on each node (6) in the cluster

# /var/lib/rancher/rke2/server/manifests/rke2-ingress-nginx-config.yaml
---
apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: rke2-ingress-nginx
  namespace: kube-system
spec:
  valuesContent: |-
    controller:
      extraArgs:
        default-ssl-certificate: "kube-system/domain.net"

I selected redeploy via the rancher console on DaemonSet rke2-ingress-nginx-controller

I have an ingress defined and working but I keep getting insecure warning, certificate issued to 'Kubernetes Ingress Controller Fake Certificate'.

curl also reports the error: SSL certificate problem: unable to get local issuer certificate

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.