远程 IP 基于 SSL 在 Kubernetes 入口

Question

In plain nginx, I can use the nginx geo module to set a variable based on the remote address. I can use this variable in the ssl path to choose a different SSL certificate and key for different remote networks accessing the server. This is necessary because the different network environments have different CAs.

How can I reproduce this behavior in a Kubernetes nginx ingress? or even Istio?

Answer 1

You can customize the generated config both for the base and for each Ingress. I'm not familiar with the config you are describing but some mix of the various *-snippet configmap options ( https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#server-snippet ) or a custom template ( https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/custom-template/ )