Hi I just tried to expose k3d for ssl traffic to the interna rancher-users #k3d

Title

famous-motherboard-75381

10/17/2022, 10:17 AM

Hi I just tried to expose k3d for ssl traffic to the internal traefik. HTTP works quite fine - but adding HTTPS capabilities also work, but they do not get exposed through the nginx loadbalancer running in front. Is there any way so have TLS/HTTPS directly via the Ingress?

wide-garage-9465

10/17/2022, 11:25 AM

Hey 👋 The k3d LB does plain TCP passthrough so it should not interfere with HTTP/S

Did you map 443 to the LB?

famous-motherboard-75381

10/17/2022, 11:43 AM

No in fact not.

wide-garage-9465

10/17/2022, 11:50 AM

I guess that may help 🙂

famous-motherboard-75381

10/17/2022, 12:01 PM

What I did was this:

Copy code

k3d cluster create -p "80:80@loadbalancer" -p "443:433@loadbalancer"

and port 80 works, 443 does not.

443 the connection is established but closed directly after that (even before any ssl handshake)

The service inside the cluster works instead:

Copy code

root@ubuntu:/# curl <http://traefik/>
404 page not found


root@ubuntu:/# curl -k <https://traefik/>
404 page not found
root@ubuntu:/#

Meh. Forget about it 🙂 I am simply stupid.

Copy code

443:433

13 Views