生成key
[root@k8smaster1 ingress]# openssl genrsa -out tls.key 2048
依据key,生成crt
[root@k8smaster1 ingress]# openssl req -new -x509 -key tls.key -out tls.crt -subj /C=CN/ST=Beijing/L=Beijing/0=DevOps/CN=tomcat.china.com

本地tls创建方法_https