DEVOCEAN

helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update
helm upgrade --install ingress ingress-nginx/ingress-nginx --create-namespace -n devops-nginx-ingress --set controller.service.annotations."service\.beta\.kubernetes\.io/aws-load-balancer-name"="eks-lb"

aws elb describe-load-balancers --query "LoadBalancerDescriptions[*].{Name:LoadBalancerName,DNSName:DNSName}"
[
    {
        "Name": "eks-lb",
        "DNSName": "dualstack.a061dd5a8ee12457783ffeae0911afee-111823484.ap-northeast-2.elb.amazonaws.com"
    }
]

helm repo add jetstack https://charts.jetstack.io
helm repo update

helm upgrade --install cert-manager jetstack/cert-manager --create-namespace --namespace devops-certmanager \
	--set crds.enabled=true

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-stg
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: << YOUR_EMAIL >>
    privateKeySecretRef:
      name: letsencrypt-stg
    solvers:
    - http01:
        ingress:
          class: nginx
      selector: {}

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prd
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: << YOUR_EMAIL >>
    privateKeySecretRef:
      name: letsencrypt-prd
    solvers:
    - http01:
        ingress:
          class: nginx
      selector: {}

kubectl apply -f issuer-stg.yaml
kubectl apply -f issuer-prd.yaml

kubectl get clusterissuer --show-kind=true
NAME                                            READY   AGE
clusterissuer.cert-manager.io/letsencrypt-prd   True    1d12h
clusterissuer.cert-manager.io/letsencrypt-stg   True    1d12h

helm upgrade nginx-server bitnami/nginx --set service.type=ClusterIP

kubectl describe deployment nginx-server

kubectl get pods -l app.kubernetes.io/name=nginx
NAME                          READY   STATUS    RESTARTS   AGE
nginx-server-949fd768-rdrm9   1/1     Running   0          3m44s

kubectl get svc -l app.kubernetes.io/name=nginx 
NAME           TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)          AGE
nginx-server   ClusterIP   172.20.176.233   <none>        80/TCP,443/TCP   4m52m

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: nginx-ingresss
  namespace: default
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-stg          
    ingress.kubernetes.io/force-ssl-redirect: "true"
    kubernetes.io/tls-acme: "true"
spec:
  ingressClassName: nginx
  rules:
  - host: hello.cloudradar.kr
    http:
      paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: nginx-server
              port: 
                number: 80
  tls:
    - hosts:
      - hello.cloudradar.kr
      secretName: hello-acme-crt

kubectl apply -f ingress-webserver.yaml
ingress.networking.k8s.io/nginx-ingresss created

kubectl get ing
NAME             CLASS   HOSTS                 ADDRESS                                                                       PORTS     AGE
nginx-ingresss   nginx   hello.cloudradar.kr   dualstack.a061dd5a8ee12457783ffeae0911afee-111823484.ap-northeast-2.elb.amazonaws.com   80, 443   3m5s

...
metadata:
  name: nginx-ingresss
  namespace: default
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prd
...

kubectl apply -f ingress-webserver.yaml
ingress.networking.k8s.io/nginx-ingresss configured