1

base/secret/http-basic-auth.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: basic-auth
+type: Opaque
+data:
+  auth: dXNlcjokYXByMSRPU0JHSXpFbCRFemNTTGk1QkJWVGFBQlhMODlNaXkvCg==
+# This is a base64 encoded string of the format "user:$apr1$OSBGIzEl$EzcSLi5BBVTaABXL89Miy/".
+# password: FVhxOBuqXK800gdmIq

base/secret/kustomization.yaml

@@ -1,3 +1,4 @@
 resources:
   - juyoutech-docker-hub-secret.yaml
-  - juyou-docker-tcr-secret.yaml
+  - juyou-docker-tcr-secret.yaml
+  - http-basic-auth.yaml

gp2504/ingress.yaml

@@ -13,6 +13,9 @@ metadata:
     nginx.ingress.kubernetes.io/auth-tls-pass-certificate-to-upstream: "true"
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/auth-type: "basic"
+    nginx.ingress.kubernetes.io/auth-secret: "http-basic-auth"
+    nginx.ingress.kubernetes.io/auth-realm: "Authentication Required"
 spec:
   tls:
     - hosts:

gp2504/kustomization.yaml

@@ -11,6 +11,7 @@ resources:
   - ../base/redis
   - ../base/redis-nodeport
   - ../base/tls
+  - ../base/secret
   - ingress.yaml
 
 configMapGenerator: