traefik intressRoute不接受TLS证书
我已经建立了一个TLS Kubernetes Secret，该秘密正常在非Traefik工作负载上运行。
当我尝试将其使用到我的一个入口路线上时，证书似乎尚未应用，并且分配了“ traefik默认证书”。
下面是我的intressroute .yaml
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: example
namespace: example-ns
spec:
entryPoints:
- websecure
routes:
- match: Host(`example.com`)
kind: Rule
services:
- name: example-svc
port: 9090
tls:
secretName: example-tls
I have set up a TLS kubernetes secret which is operating normally on the non-traefik workloads.
When I try to use it to one of my ingress routes the certificate seems to have not been applied and the "TRAEFIK DEFAULT CERT" is assigned.
Below is my IngressRoute .yaml
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: example
namespace: example-ns
spec:
entryPoints:
- websecure
routes:
- match: Host(`example.com`)
kind: Rule
services:
- name: example-svc
port: 9090
tls:
secretName: example-tls
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
找到了！
确实，问题与将TLS商店传递到命名空间和Traefik Pod有关：
我从“示例”名称空间中删除了TLS商店，一切正常！
Found it!
Indeed issue was related with passing the TLS Store to both namespaces and traefik pod logged the below:
I removed the TLS store from the "example" namespace and everything worked fine!
如果您的证书不可用（或不匹配），则Traefik将使用
Traefik默认证书。请
签署新的可用证书要使用。If your cert is not availabel (or not match), then traefik will use
TRAEFIK DEFAULT CERT.Please
sign new availabel certificateto use.