OpenShift 4 之使用https协议访问Route

使用OpenShift的oc命令可以将Service内部访问转为（oc的expose子命令）可从外部访问的Route，这种转换缺省是使用http协议访问应用的。如果要支持https协议，除了需要生成证书外，还需要用“oc create route”来创建Route对象。

1. 首先部署一个测试应用

$ oc new-project https
$ oc new-app openshift/hello-openshift

2. 创建密钥和证书，其中hello-openshift-my-https.apps-crc.testing是缺省Route的FQDN。

$ openssl genrsa -out example.key 2048
$ openssl req -new -key example.key -out example.csr
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:BJ
Locality Name (eg, city) []:BJ
Organization Name (eg, company) [Internet Widgits Pty Ltd]:RedHat
Organizational Unit Name (eg, section) []:SA
Common Name (e.g. server FQDN or YOUR name) []:hello-openshift-my-https.apps-crc.testing
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
$ openssl x509 -req -days 365 -in example.csr -signkey example.key -out example.crt

3. 根据密钥、证书和Service创建Route

$ oc create route edge --service=hello-openshift --key=example.key --cert=example.crt

4. 用https协议访问Route

curl --cacert example.crt https://hello-openshift-my-https.apps-crc.testing

来源：CSDN

作者：dawnsky.liu

链接：https://blog.csdn.net/weixin_43902588/article/details/103495890