GKE에서 DNS 설정

• frontend.gkewiki.io, backend.gkewiki.io(온프라미스와 다른 dns명)

  • window powershell 관리자 모드로 실행

    

  • hosts 파일에 ingress-controller svc의 external IP 와 도메인 명 작성

  # Copyright (c) 1993-2009 Microsoft Corp.
  #
  # This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
  #
  # This file contains the mappings of IP addresses to host names. Each
  # entry should be kept on an individual line. The IP address should
  # be placed in the first column followed by the corresponding host name.
  # The IP address and the host name should be separated by at least one
  # space.
  #
  # Additionally, comments (such as these) may be inserted on individual
  # lines or following the machine name denoted by a '#' symbol.
  #
  # For example:
  #
  #      102.54.94.97     rhino.acme.com          # source server
  #       38.25.63.10     x.acme.com              # x client host
  
  # localhost name resolution is handled within DNS itself.
  #	127.0.0.1       localhost
  #	::1             localhost
  104.198.115.150 frontend.gkewiki.io
  104.198.115.150 backend.gkewiki.io
  

  • dns 캐쉬를 flush 시켜 변경사항 적용

  PS C:\Windows\system32> ipconfig /flushdns
  

HTTPS 설정

• RSA 개인 awswiki.key 키 생성

openssl genrsa -out awswiki.key 2048

• 공개키인 새로운 CSR 키 생성

openssl req -new -key awswiki.key -out awswiki.csr -subj /CN=frontend.awswiki.io,backend.awswiki.io -addext "subjectAltName=DNS:frontend.gkewiki.io,DNS:backend.gkewiki.io"

• 두개의 key,csr을 바탕으로 인증서 발급

openssl x509 -req -days 365 -in awswiki.csr -signkey awswiki.key -out awswiki.crt -extfile <(printf "subjectAltName=DNS:frontend.gkewiki.io,DNS:backend.gkewiki.io")

• k8s로 secret 생성

kubectl create secret tls awswiki-secret --key awswiki.key --cert awswiki.crt -n frontend-ns