Helm Charts
Helm installiert und verwaltet ingress-nginx und cert-manager auf dem K3s-Cluster.
Installierte Charts
Section titled “Installierte Charts”graph TB
subgraph Helm ["Helm Releases"]
IngressChart["ingress-nginx<br/>ingress-nginx/ingress-nginx"]
CertChart["cert-manager<br/>jetstack/cert-manager"]
end
subgraph Namespaces ["Namespaces"]
IngressNS["ingress-nginx"]
CertNS["cert-manager"]
end
subgraph Function ["Funktion"]
Routing["HTTP/HTTPS Routing<br/>hostPort 80/443"]
TLS["TLS-Zertifikate<br/>Let's Encrypt"]
end
IngressChart --> IngressNS
CertChart --> CertNS
IngressNS --> Routing
CertNS --> TLS
ingress-nginx
Section titled “ingress-nginx”Konfiguration
Section titled “Konfiguration”# Helm Values (Auszug)controller: hostPort: enabled: true service: type: NodePort ingressClassResource: name: nginx- hostPort aktiviert: Direkter Zugriff auf Ports 80/443 ohne NodePort/LoadBalancer
- IngressClass:
nginx
Status prüfen
Section titled “Status prüfen”k3s kubectl get pods -n ingress-nginxk3s kubectl logs -l app.kubernetes.io/instance=ingress-nginx -n ingress-nginxcert-manager
Section titled “cert-manager”Konfiguration
Section titled “Konfiguration”# Helm Values (Auszug)installCRDs: true- CRDs: Automatisch installiert
- Cluster Issuer: Let’s Encrypt (HTTP-01)
Cluster Issuer
Section titled “Cluster Issuer”Zwei Issuer verfügbar:
| Name | Server | Nutzung |
|---|---|---|
letsencrypt-staging | acme-staging-v02 | Tests |
letsencrypt-prod | acme-v02 | Produktion |
Status prüfen
Section titled “Status prüfen”k3s kubectl get pods -n cert-managerk3s kubectl get certificate -Ak3s kubectl logs -l app.kubernetes.io/instance=cert-manager -n cert-managerHelm-Verwaltung
Section titled “Helm-Verwaltung”# Installierte Releases anzeigenhelm list -A
# Chart upgradenhelm upgrade ingress-nginx ingress-nginx/ingress-nginx \ --namespace ingress-nginx \ --values values-ingress.yaml