# 后端POD使用https,指定后端协议
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
# (替换旧版本中的secure-backends):
#nginx.ingress.kubernetes.io/secure-backends: "true"
# 指示控制器将TLS连接直接发送到后端
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
#默认禁用,需使用--enable-ssl-passthrough启动控制器开启
# 控制器将http重定向到https
nginx.ingress.kubernetes.io/ssl-redirect: "true"
# 跨域访问相关参数设置
nginx.ingress.kubernetes.io/enable-cors: "true"
nginx.ingress.kubernetes.io/cors-allow-origin: "*"
nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS"
nginx.ingress.kubernetes.io/cors-allow-credentials: "false"
nginx.ingress.kubernetes.io/cors-max-age: 600
# 后端证书认证相关参数设置
nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
nginx.ingress.kubernetes.io/proxy-ssl-protocols: "HTTPS"
nginx.ingress.kubernetes.io/proxy-ssl-secret: "secretName"
# 代理重定向相关参数设置
nginx.ingress.kubernetes.io/permanent-redirect: "https://www.google.com"
nginx.ingress.kubernetes.io/permanent-redirect-code: 308
nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md