# 后端POD使用https,指定后端協議
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
# (替換舊版本中的secure-backends):
#nginx.ingress.kubernetes.io/secure-backends: "true"
# 指示控制器將TLS連接直接發送到后端
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
#默認禁用,需使用--enable-ssl-passthrough啟動控制器開啟
# 控制器將http重定向到https
nginx.ingress.kubernetes.io/ssl-redirect: "true"
# 跨域訪問相關參數設置
nginx.ingress.kubernetes.io/enable-cors: "true"
nginx.ingress.kubernetes.io/cors-allow-origin: "*"
nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, OPTIONS"
nginx.ingress.kubernetes.io/cors-allow-credentials: "false"
nginx.ingress.kubernetes.io/cors-max-age: 600
# 后端證書認證相關參數設置
nginx.ingress.kubernetes.io/proxy-ssl-verify: "false"
nginx.ingress.kubernetes.io/proxy-ssl-protocols: "HTTPS"
nginx.ingress.kubernetes.io/proxy-ssl-secret: "secretName"
# 代理重定向相關參數設置
nginx.ingress.kubernetes.io/permanent-redirect: "https://www.google.com"
nginx.ingress.kubernetes.io/permanent-redirect-code: 308
nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/nginx-configuration/annotations.md