• 生成证书

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout n1.key -out n1.crt

kubectl create secret tls mytls  --cert=n1.crt --key=n1.key

(也可以使用，推荐使用方法1 )

kubectl create secret generic mytls --from-file=n1.crt --from-file=n1.key

[root@master15 buydo]# kubectl get secrets | grep mytls
mytls                              kubernetes.io/tls                     2      15m

cat<<END>mytls.yaml
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: test.jbjb.store
spec:
  entryPoints:
    - web
    - websecure 
  routes:
    - match: Host(`test.jbjb.store`)
      kind: Rule
      services:
        - name: encry
          port: 8080
  tls:
    secretName: mytls
END

再原来的模板添加了两个关键参数

  - websecure   启用ssl
  
    tls: 启动证书访问
    secretName: mytls