Https not working locally for ingress on my kubernetes cluster

Question

I am trying to make my ingress run over https but I'm getting HTTP ERROR 403, and I don't know what am I missing here.

I am trying to access them on my-local-domain.com and I added that entry on my etc/hosts file as 127.0.0.1 my-local-domain.com so I can access it that way.

Here's my Issuer

apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: cert-issuer
  namespace: my-namespace
spec:
  selfSigned: {}

Here's my Certificate

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: self-signed-cert
  namespace: my-namespace
spec:
  secretName: my-secret-tls
  dnsNames:
    - my-local-domain.com
    - www.my-local-domain.com
  issuerRef:
    name: cert-issuer

While here is my nginx ingress:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ingress-service
  labels:
      name: ingress-service
  namespace: my-namespace
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /$1
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
    nginx.ingress.kubernetes.io/ssl-redirect: 'true'
    namespace: my-namespace
spec:
  tls:
    - hosts:
      - my-local-domain.com
      - www.my-local-domain.com
      secretName: my-secret-tls
  rules:
  - host: my-local-domain.com
    http:
      paths:
      - path: /api/(.*)
        pathType: Prefix
        backend:
          service:
            name: web-api
            port:
              number: 443
      - path: /(.*)
        pathType: Prefix
        backend:
          service:
            name: web-client
            port:
              number: 80

nginx.conf for my web-client service

server {
        listen 80;

        location / {
            root /usr/share/nginx/html;
            index index.html index.htm;
            try_files $uri $uri/ /index.html;
        }

        gzip  on; 
    }

And when I try to access it with https://my-local-domain.com

Access to my-local-domain.com was denied
You don't have authorization to view this page.
HTTP ERROR 403

I also tried to run

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "//CN=my-local-domain.com\O=my-local-domain.com" -addext "subjectAltName = DNS:my-local-domain.com"

kubectl create secret tls tls-secret --key tls.key --cert tls.crt -n my-namespace

remove Certificate and CertificateIssuer and add tls-secret as secretName in ingress, as well as added those tls.key and tls.crt to my web-client nginx and updated it to:

    server {
      listen 443 ssl default_server;

      ssl_protocols SSLv3 TLSv1;

      server_name www.my-local-domain.com my-local-domain.com;

      access_log /var/log/nginx/access.log;
      error_log  /var/log/nginx/error.log info;

      keepalive_timeout 75 75;

      ssl_certificate /etc/ssl/certs/self-signed.crt;
      ssl_certificate_key /etc/ssl/private/self-signed.key;
      ssl_session_timeout  5m;

      add_header Strict-Transport-Security "max-age=7200";
      
      location / {
          root /usr/share/nginx/html;
          index index.html index.htm;
          try_files $uri $uri/ /index.html;
      }
    }

p.s. when doing this, i run everyrhing on port 443 instead of 80.

When I remove the tls part from my ingress, then it does work through HTTP. And I also tried to change my dns/host from my-local-domain.com to be only localhost but still the same. And even if I try to access https://localhost I get that HTTP ERROR 403.

Https not working locally for ingress on my kubernetes cluster

Answers (1)

Related Questions