Authorized Cluster Endpoint NGINX example

nginx.conf

events {
  worker_connections  4096;  ## Default: 1024
}

http {
    upstream kubernetes {
        server ip_of_controlplane_node1:6443;
        server ip_of_controlplane_node2:6443;
        server ip_of_controlplane_node3:6443;

   }

    server {
        listen      443 ssl;
        server_name your_fqdn;

# These are the certificates for your_fqdn, terminating SSL
        ssl_certificate        /etc/ssl/certs/cert.pem;
        ssl_certificate_key    /etc/ssl/certs/key.pem;
        ssl_client_certificate /etc/ssl/certs/ca.pem;

        location / {
            proxy_pass https://kubernetes;
# This is the kube-ca.pem from one of the controlplane nodes
            proxy_ssl_trusted_certificate /certs/ca.pem;

            proxy_ssl_verify        on;
            proxy_ssl_verify_depth  2;
            proxy_ssl_session_reuse on;
        }
    }
}