/docs/tasks/traffic-management/egress/egress-tls-origination/index.md

[SataQiu]

Source File: /docs/tasks/traffic-management/egress/egress-tls-origination/index.md Diff:

 diff --git a/content/en/docs/tasks/traffic-management/egress/egress-tls-origination/index.md b/content/en/docs/tasks/traffic-management/egress/egress-tls-origination/index.md
index e136d0ce7..34c6188fe 100644
--- a/content/en/docs/tasks/traffic-management/egress/egress-tls-origination/index.md
+++ b/content/en/docs/tasks/traffic-management/egress/egress-tls-origination/index.md
@@ -168,6 +168,7 @@ Both of these issues can be resolved by configuring Istio to perform TLS origina
         route:
         - destination:
             host: edition.cnn.com
+            subset: tls-origination
             port:
               number: 443
     ---
@@ -177,14 +178,16 @@ Both of these issues can be resolved by configuring Istio to perform TLS origina
       name: edition-cnn-com
     spec:
       host: edition.cnn.com
-      trafficPolicy:
-        loadBalancer:
-          simple: ROUND_ROBIN
-        portLevelSettings:
-        - port:
-            number: 443
-          tls:
-            mode: SIMPLE # initiates HTTPS when accessing edition.cnn.com
+      subsets:
+      - name: tls-origination
+        trafficPolicy:
+          loadBalancer:
+            simple: ROUND_ROBIN
+          portLevelSettings:
+          - port:
+              number: 443
+            tls:
+              mode: SIMPLE # initiates HTTPS when accessing edition.cnn.com
     EOF
     {{< /text >}}

@@ -214,6 +217,17 @@ Both of these issues can be resolved by configuring Istio to perform TLS origina
     programmatically, the code does not need to be changed. You get the benefits of TLS origination by configuring Istio,
     without changing a line of code.

+1.  Note that the applications that used HTTPS to access the external service continue to work as before:
+
+    {{< text bash >}}
+    $ kubectl exec -it $SOURCE_POD -c sleep -- curl -sL -o /dev/null -D - https://edition.cnn.com/politics
+    HTTP/1.1 200 OK
+    Content-Type: text/html; charset=utf-8
+    ...
+    Content-Length: 151654
+    ...
+    {{< /text >}}
+
 ## Additional security considerations

 Because the traffic between the application pod and the sidecar proxy on the local host is still unencrypted,

[SataQiu]

/confirm

[SataQiu]

Sorry @SataQiu, only issues with label welcome can be confirmed.

[SataQiu]

/confirm

[SataQiu]

Sorry @SataQiu, only issues with label welcome can be confirmed.

[SataQiu]

/accept

[SataQiu]

Thank you @SataQiu, this issue had been assigned to you.