spec.tls

kubectl get ingress -A -o jsonpath='{range .items[*]}{.metadata.namespace}/{.metadata.name}{"\t"}{.spec.tls[*].secretName}{"\n"}{end}'

spec.tls.hosts

tls:
  - hosts:
      - ingress-demo.example.com
    secretName: ingress-demo-tls

tls: 
  - secretName: chart-example-tls
     hosts:
       - chart-example.local

acme.cert-manager.io/http01-edit-in-place: "true"
cert-manager.io/issuer: "letsencrypt-prod"

Ingress

 apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: kuard
  annotations:
    cert-manager.io/issuer: "letsencrypt-staging"

spec:
  ingressClassName: nginx
  tls:
  - hosts:
    - example.example.com
    secretName: quickstart-example-tls
  rules:
  - host: example.example.com
    http:
      paths:
       - path: /
         pathType: Prefix
         backend:
           service:
             name: kuard
            port:
              number: 80

 apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.class: nginx
  name: example
  namespace: foo
spec:
  rules:
    - host: www.example.com
      http:
        paths:
          - backend:
              serviceName: exampleService
              servicePort: 80
            path: /
  # This section is only required if TLS is to be enabled for the Ingress
  tls:
      - hosts:
          - www.example.com
        secretName: example-tls

Official example

 apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: tls-example-ingress
spec:
  tls:
  - hosts:
      - https-example.foo.com
    secretName: testsecret-tls
  rules:
  - host: https-example.foo.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: service1
            port:
              number: 80

Related

elasticsearch values.yaml
helm_release
ingress.tls
Inappropriate value for attribute "value": element 0: string required.
IngressTLS
kind: Ingress
spec.tls
json: cannot unmarshal string into Go struct field IngressSpec.spec.tls of type v1.IngressTLS
Error: cannot patch
set_list
Data Source: helm template
OrderFailed

 enterpriseGateway.ingress.tls | list | `[{"hosts":["gateway.gem.example.com"],"secretName":"gem-gateway-tls"}]` | TLS configuration for the gateway ingress |

enableHostVerification

tls.enabled

See also

• spec.tls, acme.cert-manager.io/http01-edit-in-place, kubernetes.io/tls secret type
• spec, spec., spec.containers, spec.volumes, spec.resources, ingress.spec.rules, spec.tls
• kind: Ingress, nginx.ingress.kubernetes.io, networking.k8s.io/[v1Beta,v1 ], extensions/v1beta1, ingress.spec.rules, kubectl apply -f ingress.yaml, spec.tls, ingressClassName