search

Azure / application-gateway-kubernetes-ingress

This is an ingress controller that can be run on Azure Kubernetes Service (AKS) to allow an Azure Application Gateway to act as the ingress for an AKS cluster.
https://azure.github.io/application-gateway-kubernetes-ingress
MIT License
667 stars 413 forks source link

Application gateway redirects to value set in backend-hostname (used for SSL) #1607

Open jekahn opened 2 months ago

jekahn commented 2 months ago

Describe the bug For SSL enablement, I need to set the annotation: appgw.ingress.kubernetes.io/backend-hostname: backend

This is the CN of the certificate returned by the backend server

The health probes passes but when using the browser redirects to this value (which does not resolve to an IP)

I have TLS enabled -- please see my annotations here:

 appgw.ingress.kubernetes.io/backend-protocol: https
 appgw.ingress.kubernetes.io/health-probe-hostname: backend
 appgw.ingress.kubernetes.io/request-timeout: "120"
 cert-manager.io/cluster-issuer: letsencrypt-production
kubernetes.io/ingress.class: azure/application-gateway

I had this working, but after upgrading to k8s 1.28, it doesnt work.