K8s Ingress Controller about stackstorm-k8s HOT 4 CLOSED

  service:
    type: "LoadBalancer"
    hostname: "example.domain.com"

ingress:
  enabled: true
  path: /
  annotations:
    kubernetes.io/ingress.class: nginx
    certmanager.k8s.io/issuer:  my-issuer
    nginx.ingress.kubernetes.io/proxy-body-size: 50m
    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-buffering: "on"
    nginx.ingress.kubernetes.io/configuration-snippet: |\

  hosts:
    - example.domain.com
  tls:
    - secretName: tls-secret
      hosts:
        - example.domain.com

git clone https://github.com/jetstack/cert-manager
git checkout v0.2.3
helm install --name cert-manager contrib/charts/cert-manager --set ingressShim.extraArgs='{--default-issuer-name=letsencrypt-prod,--default-issuer-kind=ClusterIssuer}' --set ingressShim.enabled=false --namespace kube-system
kubectl -n kube-system get pods

helm install --name ingress-my-test-app stable/nginx-ingress --set rbac.create='true'

apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer
metadata:
  name: letsencrypt-prod
  namespace: default
spec:
  acme:
    # The ACME server URL
    server: https://acme-v01.api.letsencrypt.org/directory
    # Email address used for ACME registration
    email: [email protected]
    # Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: letsencrypt-prod-key
    # Enable HTTP01 validations
    http01: {}

apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: stackstorm-st2web-enterprise
  namespace: default
spec:
  secretName: stackstorm-st2web-enterprise
  commonName: st.example.com
  dnsNames:
  - st2.example.com
  issuerRef:
    name: letsencrypt-prod
    kind: Issuer
  acme:
    config:
    - http01:
        ingressClass: nginx
      domains:
      - st2.example.com

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: stackstorm-st2web-enterprise
  namespace: default
  annotations:
    certmanager.k8s.io/issuer: letsencrypt-prod
    kubernetes.io/ingress.class: nginx
spec:
  rules:
    - host: st.node.rpt.sh
      http:
        paths:
          - backend:
              serviceName: stackstorm-st2web-enterprise
              servicePort: 30677
            path: /
  tls:
    - hosts:
        - st.node.rpt.sh
      secretName: stackstorm-st2web-enterprise