K8s入口从没有证书的域重定向到另一个有证书的域

Question

There is k8s cluster with nginx-ingress. There is domain without certificate (example.io). I want redirect all requests to another my domain with certificate (example.com) without exception about bad certificate on domain example.io in browser. How can I do it? Thanks.

nginx.ingress.kubernetes.io/permanent-redirect, ingress.kubernetes.io/configuration-snippet didn;t help me. Example:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: redirect-ingress
  annotations:
  ??????
spec:
  rules:
  - host: example.io
    http:
      paths:
      - path: /
        backend:
          serviceName: some-cluster-service
          servicePort: 2020

Answer 1

You can use nginx.ingress.kubernetes.io/force-ssl-redirect: "true" annotation:

When using SSL offloading outside of cluster (eg AWS ELB) it may be useful to enforce a redirect to HTTPS even when there is no TLS certificate available. This can be achieved by using the nginx.ingress.kubernetes.io/force-ssl-redirect: "true" annotation in the particular resource.