Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

istio compatibility with appProtocol: https #678

Merged
merged 1 commit into from
Sep 9, 2024

Conversation

seankhliao
Copy link
Contributor

@seankhliao seankhliao commented Aug 15, 2024

Despite Istio docs stating that setting the name of the port to https should result in the protocol being https (TLS not intercepted), it doesn't appear to work for us, and only works by explicitly setting appProtocol.

https://istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/#explicit-protocol-selection

Checklist

  • I have verified that my change is according to the deprecations & breaking changes policy
  • Commits are signed with Developer Certificate of Origin (DCO - learn more)
  • README is updated with new configuration values (if applicable) learn more
  • A PR is opened to update KEDA core (repo) (if applicable, ie. when deployment manifests are modified)

Fixes #

@seankhliao seankhliao requested a review from a team as a code owner August 15, 2024 03:45
@seankhliao
Copy link
Contributor Author

Not sure what I'm supposed to do for the last checkbox?

Despite Istio docs stating that setting the name of the port to https
should result in the protocol being https (TLS not intercepted),
it doesn't appear to work for us, and only works by explicitly setting
appProtocol.

https://istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/#explicit-protocol-selection

Signed-off-by: Sean Liao <sean+git@liao.dev>
Copy link
Member

@JorTurFer JorTurFer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the improvement!

@JorTurFer JorTurFer enabled auto-merge (squash) September 9, 2024 09:24
@JorTurFer JorTurFer merged commit a8d5aa3 into kedacore:main Sep 9, 2024
36 checks passed
wozniakjan pushed a commit to wozniakjan/keda-charts that referenced this pull request Nov 28, 2024
Despite Istio docs stating that setting the name of the port to https
should result in the protocol being https (TLS not intercepted),
it doesn't appear to work for us, and only works by explicitly setting
appProtocol.

https://istio.io/latest/docs/ops/configuration/traffic-management/protocol-selection/#explicit-protocol-selection

Signed-off-by: Sean Liao <sean+git@liao.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants