Use Kourier Ingress in Knative

Log on to the ACS console. In the left navigation pane, click Clusters.

On the Clusters page, click the name of the target cluster. In the left navigation pane, choose Applications > Knative.

On the Services tab of the Knative page, set Namespace to default. Click Create from Template, paste the following YAML, and click Create.

The template creates a Service named helloworld-go.

apiVersion: serving.knative.dev/v1
kind: Service
metadata:
  name: helloworld-go
spec:
  template:
    spec:
      containers:
      - image: registry.cn-hangzhou.aliyuncs.com/knative-sample/helloworld-go:73fbdd56
        env:
        - name: TARGET
          value: "Knative"

Verify that the Status column displays Created.

On the Services page, note the domain name and gateway IP of helloworld-go from the Default Domain and Gateway columns.

Access the helloworld-go Service:

curl -H "Host: helloworld-go.default.example.com" http://8.141.XX.XX # Specify the actual gateway IP address and domain name that you obtained.

Expected output:

Hello Knative!

The Knative Service is accessible over HTTP.

Log on to the ACS console. In the left navigation pane, click Clusters.

On the Clusters page, click the name of the target cluster. In the left navigation pane, choose Applications > Knative.

On the Services tab of the Knative page, set Namespace to default. Click Create from Template, paste the following YAML, and click Create.

The template creates a Service named helloworld-go.

apiVersion: serving.knative.dev/v1
kind: Service
metadata:
  name: helloworld-go
spec:
  template:
    spec:
      containers:
      - image: registry.cn-hangzhou.aliyuncs.com/knative-sample/helloworld-go:73fbdd56
        env:
        - name: TARGET
          value: "Knative"

Verify that the Status column displays Created.

Create a certificate.

1. Generate a TLS certificate:

   openssl genrsa -out tls.key 4096
   openssl req -subj "/CN=*.example.com/L=*.example.com" -sha256  -new -key tls.key -out tls.csr
   echo subjectAltName = DNS:helloworld-go.default.example.com,DNS:helloworld-go.default.example.cn > extfile.cnf
   openssl x509 -req -days 3650 -sha256 -in tls.csr -signkey tls.key -out tls.crt -extfile extfile.cnf

2. Create a Secret from the generated TLS certificate:

   kubectl -n knative-serving create secret tls kourier-cert --key tls.key --cert tls.crt

Check whether the net-kourier-controller Deployment exists in the knative-serving namespace:

kubectl get deployments -n knative-serving

Configure the certificate:

kubectl -n knative-serving edit deployment net-kourier-controller

Set these parameters in the net-kourier-controller Deployment:

• CERTS_SECRET_NAMESPACE: The namespace of the Secret.

• CERTS_SECRET_NAME: The name of the Secret.

...
   spec:
      containers:
      - env:
        - name: CERTS_SECRET_NAMESPACE
          value: knative-serving 
        - name: CERTS_SECRET_NAME
          value: kourier-cert
...

Check the net-kourier-controller status:

kubectl -n knative-serving get po

Expected output:

NAME                               READY   STATUS    RESTARTS   AGE
net-kourier-controller-******   1/1     Running   0          10s