1.制作新证书

1
[root@elasticsearch01 yaml]# kubectl  create secret tls ingress-secret2021 --key minminmsn.key --cert minminmsn.crt

2.在ingress替换secretName 查看ingress

1
2
3
4
[root@elasticsearch01 yaml]# kubectl get ingress
NAME                    HOSTS                                                     ADDRESS   PORTS     AGE
jenkins                 jenkins.minminmsn.com                                              80, 443   419d
minminmsn-harbor-ingress   core-harbor.minminmsn.com,notary-harbor.minminmsn.com             80, 443   30h

在线编辑ingress，替换secretName的值由ingress-secret2020，替换为ingress-secret2021，保存生效

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
[root@elasticsearch01 yaml]# kubectl edit ingress minminmsn-harbor-ingress
# Please edit the object below. Lines beginning with a '#' will be ignored,
# and an empty file will abort the edit. If an error occurs while saving this file will be
# reopened with the relevant failures.
#
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    ingress.kubernetes.io/proxy-body-size: "0"
    ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
  creationTimestamp: "2020-07-15T03:18:15Z"
  generation: 1
  labels:
    app: harbor
    chart: harbor
    heritage: Tiller
    release: minminmsn
  name: minminmsn-harbor-ingress
  namespace: default
  resourceVersion: "91736348"
  selfLink: /apis/extensions/v1beta1/namespaces/default/ingresses/minminmsn-harbor-ingress
  uid: d2bf4b41-c649-11ea-9386-52540089b2b6
spec:
  rules:
  - host: core-harbor.minminmsn.com
    http:
      paths:
      - backend:
          serviceName: minminmsn-harbor-portal
          servicePort: 80
        path: /
      - backend:
          serviceName: minminmsn-harbor-core
          servicePort: 80
        path: /api/
      - backend:
          serviceName: minminmsn-harbor-core
          servicePort: 80
        path: /service/
      - backend:
          serviceName: minminmsn-harbor-core
          servicePort: 80
        path: /v2/
      - backend:
          serviceName: minminmsn-harbor-core
          servicePort: 80
        path: /chartrepo/
      - backend:
          serviceName: minminmsn-harbor-core
          servicePort: 80
        path: /c/
  - host: notary-harbor.minminmsn.com
    http:
      paths:
      - backend:
          serviceName: minminmsn-harbor-notary-server
          servicePort: 4443
        path: /
  tls:
  - hosts:
    - core-harbor.minminmsn.com
    secretName: ingress-secret2021
  - hosts:
    - notary-harbor.minminmsn.com
    secretName: ingress-secret2021
status:
  loadBalancer: {}