Deploy a Web App on GKE with HTTPS Redirect using Lets Encrypt

search share 가입 로그인

Deploy a Web App on GKE with HTTPS Redirect using Lets Encrypt

1시간 크레딧 7개


Google Cloud Self-Paced Labs


GKE does not provide a managed HTTPS offering, so it can be a bit daunting trying to take on the task of obtaining a valid TLS certificate without prior experience. You will need to find a Certificate Authority (CA) to provide a browser-trusted certificate and you need a way to manage those certificates.

With Let's Encrypt, you have access to a free, automated, and open certificate authority (CA), run for the public's benefit. Let's Encrypt provides a browser-trusted certificate for your web services. In combination with cert-manager, a Kubernetes add-on, the management and issuance of TLS certificates from Let's Encrypt will be completely automated.

Since GKE also lacks built-in HTTP to HTTPs redirect for Google Cloud Load Balancers (GCLB), an NGINX ingress will be deployed to handle HTTP to HTTPs redirect.

What you will build

In this lab, you're going to deploy a containerized web app in a GKE cluster with HTTPS using a browser-trusted TLS certificate and NGINX to route all HTTP traffic to HTTPS. Google Cloud Endpoints is used for its ability to dynamically provision DNS entries under DNS domain.

What you'll learn

In this lab you'll learn how to do the following:

  • Deploy a containerized web app

  • Set up an NGINX ingress for HTTP to HTTPS redirect

  • Install a cert-manager into a cluster to automate getting TLS/SSL certificates

  • Deploy/modify an ingress with TLS enabled

What you'll need

  • A recent version of Chrome is recommended
  • Basic knowledge of Linux CLI and gcloud

This lab is focused on GKE deployment and management. Non-relevant concepts and code blocks are glossed over and are provided for you to simply copy and paste.

이 실습의 나머지 부분과 기타 사항에 대해 알아보려면 Qwiklabs에 가입하세요.

  • Google Cloud Console에 대한 임시 액세스 권한을 얻습니다.
  • 초급부터 고급 수준까지 200여 개의 실습이 준비되어 있습니다.
  • 자신의 학습 속도에 맞춰 학습할 수 있도록 적은 분량으로 나누어져 있습니다.
이 실습을 시작하려면 가입하세요