Nginx OCSP stapling

This commit is contained in:
Dominik Chilla 2020-12-31 18:06:21 +00:00
parent 62d18afc63
commit 5c8189b98f

View File

@ -10,7 +10,7 @@
* [Longhorn - distributed/lightweight provider](#pv-longhorn) * [Longhorn - distributed/lightweight provider](#pv-longhorn)
* [Ingress controller](#ingress-controller) * [Ingress controller](#ingress-controller)
* [Disable Traefik-ingress](#disable-traefik-ingress) * [Disable Traefik-ingress](#disable-traefik-ingress)
* [Enable NGINX-ingress](#enable-nginx-ingress) * [Enable NGINX-ingress with OCSP stapling](#enable-nginx-ingress)
* [Installation](#install-nginx-ingress) * [Installation](#install-nginx-ingress)
* [Cert-Manager (references ingress controller)](#cert-manager) * [Cert-Manager (references ingress controller)](#cert-manager)
* [Installation](#cert-manager-install) * [Installation](#cert-manager-install)
@ -202,7 +202,7 @@ ExecStart=/usr/local/bin/k3s \
``` ```
Finally `systemctl daemon-reload` and `systemctl restart k3s` Finally `systemctl daemon-reload` and `systemctl restart k3s`
## Enable NGINX-ingress <a name="enable-nginx-ingress"></a> ## Enable NGINX-ingress with OCSP stapling <a name="enable-nginx-ingress"></a>
### Installation <a name="install-nginx-ingress"></a> ### Installation <a name="install-nginx-ingress"></a>
https://kubernetes.github.io/ingress-nginx/deploy/#using-helm https://kubernetes.github.io/ingress-nginx/deploy/#using-helm
@ -238,6 +238,7 @@ kubectl -n ingress-nginx edit configmap my-release-ingress-nginx-controller
apiVersion: v1 apiVersion: v1
<<<ADD BEGINN>>> <<<ADD BEGINN>>>
data: data:
enable-ocsp: "true"
worker-processes: "1" worker-processes: "1"
<<<ADD END>>> <<<ADD END>>>
kind: ConfigMap kind: ConfigMap