Charts: [nginx-ingress] Add default-ssl-certificate flag

Created on 16 Jul 2017  路  2Comments  路  Source: helm/charts

Which chart: nginx-ingress

Add the default-ssl-certificate flag to the controller-deployment. The flag is documented here: https://github.com/kubernetes/ingress/tree/master/controllers/nginx#default-ssl-certificate.

Most helpful comment

This was debated previously, with the conclusion being that you should use the extraArgs property instead of a bespoke default-ssl-certificate property.

So you can set the default SSL cert secret like this:

controller:
  extraArgs:
    default-ssl-certificate: kube-system/tls-secret

However, I noticed the values.yaml still has the controller.default-ssl-certificate value, despite it not being used anywhere.

All 2 comments

This was debated previously, with the conclusion being that you should use the extraArgs property instead of a bespoke default-ssl-certificate property.

So you can set the default SSL cert secret like this:

controller:
  extraArgs:
    default-ssl-certificate: kube-system/tls-secret

However, I noticed the values.yaml still has the controller.default-ssl-certificate value, despite it not being used anywhere.

@ewok2030 is there any link to that previous discussion? This option wasn't so obvious to find.

The default-ssl-certificate is very useful when using a custom defaultBackendService - especially when it contains a wildcard certificate.

Was this page helpful?
0 / 5 - 0 ratings