tencent cloud

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: test-ingress
  annotations:
    kubernetes.io/ingress.class: nginx
spec:
  rules:
  - host: test.example.com
    http:
      paths:
      - path: /
        backend:
          serviceName: web
          servicePort: 80
      tls:
        hosts:
    - test.example.com
      secretName: example-com-crt-secret # 引用证书 secret

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
name: example-gw
namespace: istio-system
spec:
selector:
  app: istio-ingressgateway
  istio: ingressgateway
servers:
- port:
  number: 80
  name: HTTP-80
  protocol: HTTP
hosts:
- example.com
- test.example.com
  tls:
  httpsRedirect: true # http 重定向 https (强制 https)
- port:
  number: 443
  name: HTTPS-443
  protocol: HTTPS
hosts:
- example.com
- test.example.com
  tls:
  mode: SIMPLE
  credentialName: example-com-crt-secret # 引用证书 secret
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
name: example-vs
namespace: test
spec:
gateways:
- istio-system/example-gw # 转发规则绑定到 ingressgateway，将服务暴露出去
hosts:
- 'test.example.com'
http:
- route:
- destination:
    host: example
    port:
      number: 80