安装Cert Manager #

apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: cluster-letsencrypt-prod
spec:
  acme:
    email: hnbcao@qq.com
    privateKeySecretRef:
      name: cluster-letsencrypt-prod
    server: https://acme-v02.api.letsencrypt.org/directory
    solvers:
    - http01:
        ingress:
          class: traefik

kind: Ingress
apiVersion: extensions/v1beta1
metadata:
  name: harbor-ingress
  namespace: ns-harbor
  labels:
    app: harbor
    chart: harbor
    heritage: Helm
    release: harbor
  annotations:
    cert-manager.io/cluster-issuer: cluster-letsencrypt-prod
spec:
  tls:
    - hosts:
        - harbor.domian.io
      secretName: harbor-letsencrypt-tls
  rules:
    - host: harbor.domian.io
      http:
        paths:
          - path: /
            backend:
              serviceName: harbor-harbor-portal
              servicePort: 80