KongIngress Service Upstream HTTPS about kubernetes-ingress-controller HOT 17 CLOSED

kind: Service
apiVersion: v1
metadata:
  name: stke-egress-svc
  annotations:
    konghq.com/client-cert: stke-egress-secret
    konghq.com/protocol: https
spec:
  type: ExternalName
  externalName: tke.kubernetes.oa.com
  ports:
  - name: https
    port: 443
    targetPort: 443 
    protocol: TCP
---
kind: Secret
apiVersion: v1
metadata:
  name: stke-egress-secret
type: kubernetes.io/tls
data:
  tls.crt: $YOUR_TLS_CRT
  tls.key: $YOUR_TLS_KEY
---
apiVersion: configuration.konghq.com/v1
kind: KongIngress
metadata:
  name: stke-egress-ing
  annotations:
    kubernetes.io/ingress.class: "kong"
proxy:
  protocols:
    - https
route:
  protocols:
    - https
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: stke-egress-ing
  annotations:
    kubernetes.io/ingress.class: "kong"
    konghq.com/override: stke-egress-ing
    konghq.com/strip-path: "true"
    konghq.com/protocols: https
spec:
  rules:
    - host:
      http:
        paths:
        - path: /external/stke
          backend:
            serviceName: stke-egress-svc
            servicePort: https

kind: Service
apiVersion: v1
metadata:
  name: fooservice
  namespace: test
spec:
  type: ExternalName
  externalName: tke.kubernetes.oa.com
  ports:
  - name: http
    port: 80
    protocol: TCP
  - name: https
    port: 443
    protocol: TCP

---
apiVersion: configuration.konghq.com/v1
kind: KongIngress
metadata:
  name: foo-ingress
  namespace: test
proxy:
  path: /foo-prod
  protocol: https
route:
  strip_path: true
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: foo-ingress
  namespace: test
  annotations:
    kubernetes.io/ingress.class: "egress"   # this is my kong ingress controller
spec:
  rules:
    - host:
      http:
        paths:
        - path: /foo
          backend:
            serviceName: fooservice
            servicePort: https

---
{{ $ingressClass := .Values.ingressController.ingressClass }}

{{- range .Values.custom_plugins }}
apiVersion: configuration.konghq.com/v1
kind: KongPlugin
metadata:
  name: egress-plugin-{{ .name }}
  annotations:
    kubernetes.io/ingress.class: {{ $ingressClass | quote }}
  {{- if .global }}
  labels:
    global: 'true'
  {{- end }}
plugin: {{ .plugin_name }}
config:
  {{- toYaml .config | nindent 2 }}
---
{{- end }}

{{- range .Values.routes }}
kind: KongIngress
apiVersion: configuration.konghq.com/v1
metadata:
  name: {{ .name }}-egress-ing
route:
  preserve_host: {{ .preserve_host | default "false" }}
  {{- if .route }}
  {{- range $key, $value := .route }}
  {{ $key }}: {{ $value }}
  {{- end }}
  {{- end }}
upstream:
  host_header: {{ .host_header | default .url }}
  {{- if .upstream }}
  {{- range $key, $value := .upstream }}
  {{ $key }}: {{ $value }}
  {{- end }}
  {{- end }}
---

{{- if .endpoint }}
apiVersion: v1
kind: Endpoints
metadata:
  name: {{ .name }}-egress-svc
subsets:
  - addresses:
    - ip: {{ .endpoint }}
    ports:
    - port: {{ .external_port | default 80 }}
---
apiVersion: v1
kind: Service
metadata:
  name: {{ .name }}-egress-svc
  annotations:
    {{- if .service_path }}
    konghq.com/path: {{ .service_path }}
    {{- end }}
    konghq.com/override: {{ .name }}-egress-ing
spec:
  ports:
  - port: 80
    targetPort: {{ .external_port | default 80 }}
    protocol: {{ .protocol | default "TCP" }}
---
{{- else }}
apiVersion: v1
kind: Service
metadata:
  name: {{ .name }}-egress-svc
  annotations:
    {{- if .service_path }}
    konghq.com/path: {{ .service_path }}
    {{- end }}
    konghq.com/override: {{ .name }}-egress-ing
spec:
  type: ExternalName
  externalName: {{ .url }}
  ports: 
    - name: {{ .port_name | default "http" }}
      port: {{ .port | default 80 }}
      targetPort: {{ .external_port | default 80 }}
      protocol: {{ .protocol | default "TCP" }}
---
{{- end }}

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: {{ .name }}-egress-ing
  annotations:
    kubernetes.io/ingress.class: {{ $ingressClass | quote }}
    {{- if .plugin_string }}
    konghq.com/plugins: {{ .plugin_string }}
    {{- end }}
    {{- if .strip_path }}
    konghq.com/strip-path: {{ .strip_path | quote }}
    {{- end }}
    {{- if .https }}
    konghq.com/override: {{ .name }}-egress-ing
    konghq.com/protocols: "https"
    {{- end }}
spec:
  rules:
  - host:
    http:
      paths:
      - path: {{ .path }}
        backend:
          serviceName: {{ .name }}-egress-svc
          servicePort: {{ .port | default "http" }}
---
{{- end }}

routes:
  - name: stkeapi
    https: true
    cert: xxxxxxx
    key: xxxxxxxx
    port: 443
    external_port: 443
    path: /external/stke/api
    strip_path: true
    url: api.kubernetes.oa.com
  - name: stke
    https: true
    cert: xxxxxxxx
    key: xxxxxxx
    port: 443
    external_port: 443
    path: /external/stke
    strip_path: true
    url: tke.kubernetes.oa.com