Expose https services

[Smana]

Hello folks,

The question is pretty simple: Is there a way to expose https service.
The documentation mention only plain http ingress or nodeport.

Would that be possible to apply an ingress similar to

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: dex
spec:
  rules:
  - host: dex.domain.tld
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: dex
            port:
              number: 5556
  tls:
    - hosts:
       - dex.domain.tld
      secretName: dex-tls

curl -H 'Host: dex.domain.tld' https://localhost:6440 -k
curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number

I might be missing something, any other way to expose https services would be welcome :)

I'm writing a demo on kube-oidc-proxy here (work in progress) :

Thank you for your help

[iwilltry42]

Hi @Smana, how did you create your cluster?
You can "just" use k3d cluster create --port 6443:443@loadbalancer and then access your service via https://your.service.com:6443 (given that you have some way of resolving your.service.com to localhost).
Should be basically the same as for http... what does curl output when you use --verbose?

[Smana]

Oh yes, that works indeed. I don't know why my previous tests were failing. Anyway, thank you!