Skip to content

Commit

Permalink
Expand on ingress-nginx ssl termination section context
Browse files Browse the repository at this point in the history
Co-authored-by: Nicholas Morey <nicholas@morey.tech>
Signed-off-by: Tom Smith <rtsmith@users.noreply.github.com>
  • Loading branch information
rtsmith and morey-tech committed Jun 6, 2023
1 parent 3663ebe commit 0535266
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions docs/operator-manual/ingress.md
Original file line number Diff line number Diff line change
Expand Up @@ -244,8 +244,9 @@ spec:

### Option 2: SSL Termination at Ingress Controller

Since ingress-nginx Ingress supports only a single protocol per Ingress object, an alternative
way would be to define two Ingress objects. One for HTTP/HTTPS, and the other for gRPC:
An alternative approach is to perform the SSL termination at the Ingress. Since an `ingress-nginx` Ingress supports only a single protocol per Ingress object, two Ingress objects need to be defined using the `nginx.ingress.kubernetes.io/backend-protocol` annotation, one for HTTP/HTTPS and the other for gRPC.

Each ingress will be for a different domain (`argocd.example.com` and `grpc.argocd.example.com`). This requires that the Ingress resources use different TLS `secretName`s to avoid unexpected behavior.

HTTP/HTTPS Ingress:
```yaml
Expand Down

0 comments on commit 0535266

Please sign in to comment.