apiVersion: traefik.containo.us/v1alpha1
kind: TLSOption
metadata:
  name: default
  namespace: default
spec:
  cipherSuites:
    - TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
    - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
    - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
    - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
    - TLS_AES_256_GCM_SHA384
    - TLS_AES_128_GCM_SHA256
    - TLS_CHACHA20_POLY1305_SHA256
    - TLS_FALLBACK_SCSV
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: foo
  labels:
    app: nginx
  annotations:
    traefik.ingress.kubernetes.io/router.tls: "false"
    nginx.ingress.kubernetes.io/rewrite-target: / #重寫路徑
    nginx.ingress.kubernetes.io/ssl-redirect: 'true' #http 自動轉https
    nginx.ingress.kubernetes.io/proxy-connect-timeout: "600" #修改代理超時時間，默認是60s
    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
spec:
  tls:
    - hosts:
      - 'www.lenovofuturecenter.com'
      #kubectl create secret tls center-com-secret --key ./tls.key --cert ./tls.crt
      secretName: center-com-secret
  rules:
    # 外界入口可訪問的域名配置
    - host: www.center.com
      http:
        paths:
          # 可配置訪問的入口路徑
          - path: /
            pathType: Prefix
            backend:
              service:
                # 選擇器，代表訪問Service：future-center-xcx-container-service
                # api訪問使用對內的服務
                name: future-center-xcx-container-service
                # 內部容器端口
                port:
                  number: 8189