TLS termination with Ingress in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is TLS termination in the context of Kubernetes Ingress?

TLS termination means the Ingress controller handles decrypting HTTPS traffic, so the backend services receive plain HTTP traffic.

beginner

Which Kubernetes resource is used to configure TLS certificates for Ingress?

A Kubernetes Secret of type 'tls' stores the TLS certificate and private key used by the Ingress for TLS termination.

intermediate

How do you specify TLS settings in an Ingress manifest?

You add a 'tls' section listing the hosts and the secretName that contains the TLS certificate.

intermediate

Why is TLS termination at Ingress useful in Kubernetes?

It centralizes HTTPS handling, reduces load on backend services, and simplifies certificate management.

advanced

What happens if the TLS secret referenced in the Ingress does not exist?

The Ingress controller cannot terminate TLS, so HTTPS connections will fail or fallback to HTTP depending on configuration.

What Kubernetes object stores the TLS certificate for Ingress TLS termination?

A Pod

B Secret

C ConfigMap

D Service

TLS certificates are stored in Secrets of type 'tls' for secure handling.

Where is TLS termination performed when using Ingress in Kubernetes?

A At the Ingress controller

B At the backend service

C At the Pod level

D At the Node level

Ingress controller handles TLS termination, decrypting HTTPS traffic before forwarding.

Which field in the Ingress manifest specifies the TLS secret?

A metadata.name

B spec.backend.serviceName

C spec.rules.host

D spec.tls.secretName

The 'secretName' under 'spec.tls' points to the TLS secret.

What protocol does the Ingress controller use to communicate with backend services after TLS termination?

A FTP

B HTTPS

C HTTP

D SSH

After TLS termination, traffic is usually forwarded as plain HTTP to backend services.

If you want to enable HTTPS for multiple domains in Ingress, what should you do?

A List all domains under spec.tls.hosts with the same secret

B Create separate Ingress for each domain without TLS

C Use ConfigMap to store certificates

D Use NodePort service type

You list all domains in the 'hosts' array under 'spec.tls' using the same TLS secret.

Explain how TLS termination works with Kubernetes Ingress and why it is beneficial.

Think about where encryption ends and how it affects backend services.

Describe the steps to configure TLS termination in a Kubernetes Ingress resource.

Focus on secret creation and Ingress manifest changes.