infraservidores@vml-bootstrap:~/echoheaders$ kubectl get ing -n default
NAME CLASS HOSTS ADDRESS PORTS AGE
test avi-lb test.k8s.internal 80, 443 4m24s
2025-01-14T16:11:31.032Z ^[[33mWARN^[[0m nodes/avi_model_evh_nodes.go:1273 key: Service/echo2/test, msg: secret: has been deleted, err: resource name may not be empty
2025-01-14T16:11:31.043Z ^[[33mWARN^[[0m nodes/avi_model_evh_nodes.go:1273 key: Service/echo2/test, msg: secret: has been deleted, err: resource name may not be empty
2025-01-14T16:11:31.049Z ^[[33mWARN^[[0m nodes/avi_model_evh_nodes.go:1273 key: Service/echo2/test, msg: secret: has been deleted, err: resource name may not be empty
TKGs, AKO 1.12.1
kubectl create secret tls test-tls-secret \
--cert=path/to/cert.pem \
--key=path/to/key.pem
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations: {}
labels: {}
name: test
namespace: default
spec:
ingressClassName: avi-lb
rules:
- host: test.k8s.internal
http:
paths:
- backend:
service:
name: test
port:
number: 8080
path: /
pathType: Prefix
tls:
- hosts:
- test.k8s.internal
secretName: test-tls-secret
secretName`
field under the `tls`
section to specify which secret contains the TLS certificatetls.hosts`
matches the hostname specified in `rules.host`