HTTPS support

Obtaining TLS certificates traditionally has been an expensive and manual business. If you wanted to do it cheaply, you could self-sign your certificates, but browsers would complain when opening up your site and identify it as not trusted. The Let's Encrypt service changes all that. Let's Encrypt is a free, automated, and open CA, run for the public's benefit. It gives people the digital certificates they need in order to enable HTTPS (SSL/TLS) for websites, for free, in the most user-friendly way.

Note

Although this section focuses on using an automated service such as Let's Encrypt, you can still pursue the traditional path of buying a certificate from an existing CA and importing it into Kubernetes.

Installing an Ingress controller

With the Ingress object, Kubernetes provides a clean way of securely exposing your services. It provides an SSL endpoint and name-based routing, meaning different DNS names can be routed to different back...