# https://kubernetes.io/docs/concepts/services-networking/ingress/#the-ingress-resource

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: dashboard
  namespace: kubernetes-dashboard
  annotations:
    kubernetes.io/ingress.class: "nginx"    
    nginx.ingress.kubernetes.io/use-regex: "true" # 开启use-regex，启用path的正则匹配
    nginx.ingress.kubernetes.io/rewrite-target: / # 路径重写
    nginx.ingress.kubernetes.io/ssl-redirect: "true" # 默认为 true，启用 TLS 时，http请求会 308 重定向到https    
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" # 默认为 http，开启后端服务使用 proxy_pass https://协议
spec:
  tls:
  - hosts:
    - dashboard.ushub.cn ## 泛域名可以写数组里使用同一个 secretName
    secretName: ushub.cn
  rules:
  - host: dashboard.ushub.cn
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: kubernetes-dashboard
            port:
              number: 443