inside k8s
k8s
pod
service
ingress
The internet
pod
service
pod
service
each user
• Ϣʔβʔ͝ͱͷϦιʔεɺKustomizeΛར
༻ͯ͠ஔͯ͠deploymentsΛapply
• ໊લղܾʹexternal dnsΛར༻
• ূ໌ॻͷൃߦcert-managerΛར༻
• ingressʹPublicIPΛ༩͠ɺ֎෦͔ΒͷΞ
ΫηεੑΛ֬อ
ip
Slide 55
Slide 55 text
external-dns
---
apiVersion: v1
kind: Service
metadata:
annotations:
external-dns.alpha.kubernetes.io/hostname: lolipop-www.example.dev
service
Any Backend
https://github.com/kubernetes-sigs/external-dns
external-dns-controller
Slide 56
Slide 56 text
cert-manager
https://github.com/jetstack/cert-manager
cert-manager-controller
Any DNS Backend
Certificate
challenge
ূ໌ॻͷߋ৽ࣗಈͰߦͬͯ͘ΕΔͷͰ
%/4ͱΈ߹ΘͤΔͱϚωʔδυϫΠϧυΧʔυূ໌ॻ͕ൃߦͰ͖Δ