{"id":274,"date":"2023-07-19T05:55:12","date_gmt":"2023-07-19T05:55:12","guid":{"rendered":"http:\/\/www.adartis.de\/?p=274"},"modified":"2023-07-19T07:19:05","modified_gmt":"2023-07-19T07:19:05","slug":"traefik-freischaltung-tls-mit-einer-beispielanwendung-harbor","status":"publish","type":"post","link":"https:\/\/www.adartis.de\/?p=274","title":{"rendered":"Traefik"},"content":{"rendered":"\n

Traefik: Freischaltung TLS mit einer Beispielanwendung (Harbor)<\/strong><\/p>\n\n\n\n

Um dieses Ziel zu erreichen, muss man sich um ein paar Sachen k\u00fcmmern.<\/p>\n\n\n\n

1- Wenn self-signed certificate benutzt wird, muss folgende argument zu Traefik config hizugef\u00fcgt werden.<\/p>\n\n\n\n

–serversTransport.insecureSkipVerify=true<\/p>\n\n\n\n

2-Traefik Middleware muss wegen http-redirect erstellt werden.<\/p>\n\n\n\n

apiVersion: traefik.containo.us\/v1alpha1
kind: Middleware
metadata:
name: httpredirect
namespace: harbor
spec:
redirectScheme:
scheme: https
permanent: true<\/p>\n\n\n\n

3-TLS Zertifikat muss als ein kubernetes secret definiert werden. Die Private-key muss \u201cunencrypted\u201c sein.<\/p>\n\n\n\n

$ kubectl create secret tls adartis-cert –key=key.unencrypted.pem –cert=server.pem -n harbor<\/p>\n\n\n\n

4-Die komplette Code durch einem K8s IngressRoute is wie folgt:<\/p>\n\n\n\n

\n
\n
\n

apiVersion: traefik.containo.us\/v1alpha1<\/p>\n<\/div>\n\n\n\n

kind: Middleware<\/p>\n\n\n\n

metadata:<\/p>\n<\/div>\n\n\n\n

  name: httpredirect<\/p>\n\n\n\n

  namespace: harbor<\/p>\n\n\n\n

spec:<\/p>\n\n\n\n

  redirectScheme:<\/p>\n\n\n\n

    scheme: https<\/p>\n\n\n\n

    permanent: true<\/p>\n<\/div>\n\n\n\n

—<\/p>\n\n\n\n

apiVersion: traefik.containo.us\/v1alpha1<\/p>\n\n\n\n

kind: IngressRoute<\/p>\n\n\n\n

metadata:<\/p>\n\n\n\n

  name: harbor-ing<\/p>\n\n\n\n

  namespace: harbor<\/p>\n\n\n\n

spec:<\/p>\n\n\n\n

  entryPoints:<\/p>\n\n\n\n

    – web<\/p>\n\n\n\n

    – websecure<\/p>\n\n\n\n

  routes:<\/p>\n\n\n\n

    – kind: Rule<\/p>\n\n\n\n

      match: Host(`harbor.apps.rancher.adartish.de`)<\/p>\n\n\n\n

      middlewares:<\/p>\n\n\n\n

        – name: httpredirect<\/p>\n\n\n\n

      services:<\/p>\n\n\n\n

        – kind: Service<\/p>\n\n\n\n

          name: harbor-11-1636456482<\/p>\n\n\n\n

          passHostHeader: true<\/p>\n\n\n\n

          namespace: harbor<\/p>\n\n\n\n

          port: 443<\/p>\n\n\n\n

  tls:  <\/p>\n\n\n\n

    secretName: adartis-cert    <\/p>\n\n\n\n

5-Change an encrypted private-key.pem to UNencrypted:<\/p>\n\n\n\n

openssl rsa -in key.pem -out key.unencrypted.pem -passin pass:TYPE_YOUR_PASS<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Traefik: Freischaltung TLS mit einer Beispielanwendung (Harbor) Um dieses Ziel zu erreichen, muss man sich […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-274","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.adartis.de\/index.php?rest_route=\/wp\/v2\/posts\/274","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.adartis.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.adartis.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.adartis.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.adartis.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=274"}],"version-history":[{"count":7,"href":"https:\/\/www.adartis.de\/index.php?rest_route=\/wp\/v2\/posts\/274\/revisions"}],"predecessor-version":[{"id":308,"href":"https:\/\/www.adartis.de\/index.php?rest_route=\/wp\/v2\/posts\/274\/revisions\/308"}],"wp:attachment":[{"href":"https:\/\/www.adartis.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=274"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.adartis.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=274"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.adartis.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=274"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}