一、安装 cert-manager

kubectl apply -f cert-manager.yaml

二、生成自签名证书

• cert-selfsigned.yaml

apiVersion: cert-manager.io/v1
kind: Issuer
metadata:name: selfsignednamespace: module
spec:selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:name: selfsigned-certnamespace: module
spec:duration: 72hrenewBefore: 10hdnsNames:- zyx.module.cnsecretName: zyx-module-cn-cert-tlsissuerRef:name: selfsigned

• 执行命令

kubectl apply -f cert-selfsigned.yaml

• 查看证书

kubectl describe certificate selfsigned-cert -n module