Which chart: nginx-ingress
Add the default-ssl-certificate flag to the controller-deployment. The flag is documented here: https://github.com/kubernetes/ingress/tree/master/controllers/nginx#default-ssl-certificate.
This was debated previously, with the conclusion being that you should use the extraArgs property instead of a bespoke default-ssl-certificate property.
So you can set the default SSL cert secret like this:
controller:
extraArgs:
default-ssl-certificate: kube-system/tls-secret
However, I noticed the values.yaml still has the controller.default-ssl-certificate value, despite it not being used anywhere.
@ewok2030 is there any link to that previous discussion? This option wasn't so obvious to find.
The default-ssl-certificate is very useful when using a custom defaultBackendService - especially when it contains a wildcard certificate.
Most helpful comment
This was debated previously, with the conclusion being that you should use the extraArgs property instead of a bespoke default-ssl-certificate property.
So you can set the default SSL cert secret like this:
However, I noticed the values.yaml still has the controller.default-ssl-certificate value, despite it not being used anywhere.