需要新增ServersTransport资源配置,指定insecureSkipVerify=true跳过证书验证。

apiVersion: traefik.io/v1alpha1
kind: ServersTransport
metadata:
  name: truenas-insecure-transport
  namespace: ${namespace}
spec:
  insecureSkipVerify: true

接着,需要在IngressRoute当中去配置serversTransport=insecure-transport,去让我们的跳过证书验证配置可以生效。

完成的K8S Yaml资源清单配置如下:

apiVersion: traefik.io/v1alpha1
kind: ServersTransport
metadata:
  name: truenas-insecure-transport
  namespace: ${namespace}
spec:
  insecureSkipVerify: true
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: http
  namespace: ${namespace}
spec:
  entryPoints:
    - web
  routes:
    - kind: Rule
      match: Host(`${host-name}`)
      services:
        - name: ${svc-name}
          port: 443
          serversTransport: insecure-transport