1

I've been trying to test out Kubernetes on Google Cloud, but would need HTTPS/TLS (only) exposed on the deployed application. To start, I just followed this tutorial, which worked fine for plain HTTP over port 80: https://cloud.google.com/kubernetes-engine/docs/quickstart

To get TLS support working with Let's Encrypt, I've tried (without success):

... Does anyone have any suggestions on how to serve just HTTPS for the original tutorial? No need for plain HTTP unless it's a freebie, but I'm really scratching my head on this one since I haven't worked with Kubernetes before and I haven't been able to get Let's Encrypt working at all here.

  • have you considered using a tiny VM as a load balancer running Traefik? It supports Let's Encrypt renewal without any effort and costs a little less than Google's load balancer. A lot of good info here: estl.tech/… – sippybear Oct 10 '18 at 21:03
  • @sippybear Nice article! One issue with using a VM is that it’s linked to the cluster’s ephemeral IP. – Ben Guild Oct 11 '18 at 0:07
3

So, it turns out that you can just add TLS directly on the load balancer now, and it'll issue a Let's Encrypt certificate automatically. This is doable via Cloud Console:

Let's Encrypt issued on GCP LB

No clue why this isn't more well-known.

  • Nice, probably newly added functionality. You should accept your answer so people know you've found a good solution! – sippybear Oct 11 '18 at 17:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.