An Ingress must terminate HTTPS for permits.example.gov using certi…

Question

An Ingress must terminate HTTPS for permits.example.gov using certificate files you already have. Which Secret approach fits Ingress TLS?

Accepted Answer

Create a TLS Secret (kubernetes.io/tls) with tls.crt and tls.key, then reference that Secret from the Ingress spec.tls section. — Ingress HTTPS wants a proper TLS Secret—cert and key as tls.crt and tls.key. Point spec.tls at that Secret for the host. Username/password Opaque Secrets and ConfigMaps aren't the Ingress TLS handshake material.

Answer

Create an Opaque Secret with keys username and password and attach it under spec.tls.

Answer

Store the certificate only in a ConfigMap named tls and reference it from imagePullSecrets.

Answer

Put the PEM files in annotations on the Ingress; controllers always prefer annotations over Secrets.

An Ingress must terminate HTTPS for `permits.example.gov` using certificate files you already have. Which Secret approach fits Ingress TLS?

Short Explanation

Full Explanation