Istio Kubernetes Ingress (not gateway) to HTTPS backend service

Security
1

Hello All!

Could you please confirm, that it is NOT possible to configure the Istio Kubernetes Ingress (not the Istio ingress gateway) to forward traffic to a Kubernetes service exposing HTTPS endpoint?

That is the functionality available in the Nginx Ingress using

nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"

annotation.

Or is there a way to have an HTTPS backend exposed via pure Istio Kubernetes Ingress.

PS: In our set up we don’t have Istio service mesh available and can only rely on the Istio Kubernetes Ingress, unless we’ll have to fall back to Nginx ingress.

Thank you!

2

No, this is not part of the Ingress spec. It’s exposed in Istio through DestinationRule which does work with Ingress

1 Like