kubernetes - 如何使用 getambassador 创建 TLS 证书？

Question

由于某些原因，我正在尝试使用大使 1.13 版本。通过使用 LetsEncrypt 和大使方法创建证书：但它会产生一些错误：

apiVersion: getambassador.io/v2
kind: Host
metadata:
  name: quote-host
spec:
  hostname: quote.kafkacake.xyz
  acmeProvider:
    email: yusufkaratoprak@gmail.com
  tlsSecret:
    name: tls-quote-cert
  requestPolicy:
    insecure:
       action: Redirect
       additionalPort: 8080
---
apiVersion: getambassador.io/v2
kind: Host
metadata:
  name: echo-host
spec:
  hostname: echo.kafkacake.xyz
  acmeProvider:
    email: yusufkaratoprak@gmail.com
  tlsSecret:
    name: tls-echo-cert
  requestPolicy:
    insecure:
       action: Redirect
       additionalPort: 8080

错误-1：

错误 2：

我该如何解决这个问题？

下面的代码可以工作，但上面的大使版本不工作：

apiVersion: getambassador.io/v2
kind: Host
metadata:
  name: example-host
  namespace: default
spec:
  acmeProvider:
    authority: 'https://acme-v02.api.letsencrypt.org/directory'
    email: yusufkaratoprak@gmail.com
  ambassadorId:
    - default
  hostname: test.mandrakee.xyz
  requestPolicy:
    insecure:
      action: Redirect
      additionalPort: 8080
  selector:
    matchLabels:
      hostname: test.mandrakee.xyz
  tlsSecret:
    name: tls-cert
---
apiVersion: getambassador.io/v2
kind: Host
metadata:
  name: example2-host
  namespace: default
spec:
  acmeProvider:
    authority: 'https://acme-v02.api.letsencrypt.org/directory'
    email: yusufkaratoprak@gmail.com
  ambassadorId:
    - default
  hostname: echo.mandrakee.xyz
  requestPolicy:
    insecure:
      action: Redirect
      additionalPort: 8080
  selector:
    matchLabels:
      hostname: echo.mandrakee.xyz
  tlsSecret:
    name: tls-cert

大使版本不工作：主机 CRD、ACME 支持和外部负载均衡器配置。详细信息： https ://www.getambassador.io/docs/edge-stack/1.13/topics/running/host-crd/