fbeltrao / aks-letsencrypt

Guide to setup Let's Encrypt on AKS

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add TLS to AKS Ingress

This repository demonstrates how to add Kubernetes Ingress to a cluster in Azure Kubernetes Services. Moreover, it covers adding TLS termination to custom domain (i.e. www.example.com) using Let's Encrypt free services.

Motivation

I own a Visual Studio subscription which gives me monthly Azure credits. I want to optimize the credits usage to run my blog and temporary experiments seamlessly. Additionally, I would like to use my own domain.

Since I don't expect continuous and high load in any of the workloads a good option is to use AKS with B-series VMs. In short, B-series VMs store credits during low load, spending them during higher load. It is perfect for burst/seasonal workloads.

The end solution is looks like this:

End solution

New deployments should be able to create TLS terminated sub-domains.

Step by step guide

  1. Use Azure DNS for a domain
  2. Create AKS Cluster
  3. Install NGINX Ingress
  4. Install Certicate Manager with http validation
  5. Setup wildcard certificates with Azure DNS validation
  6. Ingress to external URL

References

About

Guide to setup Let's Encrypt on AKS

License:MIT License