問題:HTTPS轉發報錯failed to convert certificate chain from PEM to DER: PEM_read_bio_X509_AUX() failed
分析:谷歌搜索https://github.com/kubernetes/ingress-nginx/issues/4106分析是Nginx Ingress Controller版本問題,
It can be fixed by upgrading the Nginx Ingress Controller to version 0.25.0 or higher. Alternatively, you can downgrade to version 0.23.0.
解決:無論升級還是降級都沒有解決問題,反而Nginx Ingress Controller無法啓動了。
但是在升級到version 0.25.0的過程中看到了日誌設置了個參數–enable-ssl-chain-completion=false,這個參數跟以上問題看着有點關係,所以決定改回v0.24.0版本,並添加以上參數。
"spec": {
"containers": [
{
"name": "nginx-ingress-controller",
"image": "quay.io/kubernetes-ingress-controller/nginx-ingress-controller:0.24.0",
"args": [
"/nginx-ingress-controller",
"--enable-ssl-chain-completion=false",
"--default-backend-service=kube-system/ningx-ingress-nginx-ingress-default-backend",
"--election-id=ingress-controller-leader",
"--ingress-class=nginx",
"--configmap=kube-system/ningx-ingress-nginx-ingress-controller"
],
添加以上參數後問題結局。此問題解決可謂是一波三折,百度,谷歌都沒有解決,無意中發現這個參數,竟然解決了。