Hi, sorry I didn't see this the first time it came around. It is actually possible to do this, but complicated. The proxy must do authentication (identity verification). The path between the proxy and kube-apiserver must be mutual TLS auth. The proxy has to set a header to inform kube-apiserver who is at the other end of the connection.
The kube-aggregator <https://github.com/kubernetes/kube-aggregator> component is basically intended to be this proxy. I think you should be able to set it up with nginx, but there's no docs and no guarantees. On Sat, Sep 9, 2017 at 2:10 AM, Torsten Bronger < bron...@physik.rwth-aachen.de> wrote: > Hallöchen! > > George Poenaru writes: > > > I have same problem as you Torsten. Did you found a solution to > > forward the certificate ? > > I'm afraid I haven't revisited the problem so far. But > https://github.com/kubernetes/minikube/pull/1149 may help you. > > Tschö, > Torsten. > > -- > Torsten Bronger > > -- > You received this message because you are subscribed to the Google Groups > "Kubernetes user discussion and Q&A" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to kubernetes-users+unsubscr...@googlegroups.com. > To post to this group, send email to kubernetes-users@googlegroups.com. > Visit this group at https://groups.google.com/group/kubernetes-users. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-users+unsubscr...@googlegroups.com. To post to this group, send email to kubernetes-users@googlegroups.com. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.
