From 4a82ce91f7fc2c4a8cef3c0bde091e91d2ddf851 Mon Sep 17 00:00:00 2001
From: iProbe <iprobe@noreply.localhost>
Date: Tue, 21 Feb 2023 16:22:10 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20'CloudNative/Kubernetes/Ba?=
 =?UTF-8?q?se/nginx-ingress=E6=94=AF=E6=8C=81http=E4=B8=8Ehttps.md'?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../Base/nginx-ingress支持http与https.md      | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 CloudNative/Kubernetes/Base/nginx-ingress支持http与https.md

diff --git a/CloudNative/Kubernetes/Base/nginx-ingress支持http与https.md b/CloudNative/Kubernetes/Base/nginx-ingress支持http与https.md
new file mode 100644
index 0000000..866a8cc
--- /dev/null
+++ b/CloudNative/Kubernetes/Base/nginx-ingress支持http与https.md
@@ -0,0 +1,32 @@
+默认情况下,如果为该Ingress 启用了 TLS,控制器会使用 308 永久重定向响应将 HTTP 客户端重定向到 HTTPS 端口 443.(Ingress 里配置了 https 证书的话，默认就一定会走 HTTPS)
+
+若是还想使用http协议,则可以使用全局禁用 ssl-redirect: "false",或每个 Ingress 中 nginx.ingress.kubernetes.io/ssl-redirect: "false"特定资源中的注释。
+
+```yaml
+kind: Ingress
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: test-server-ing
+  namespace: test
+  labels:
+    app: test-server-ing
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: 'false'  ##  支持http和https
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - test.test.com
+      secretName: test-tls
+  rules:
+    - host: test.test.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: test-server-svc
+                port:
+                  number: 8080
+```
\ No newline at end of file