application-gateway-kubernetes-ingress icon indicating copy to clipboard operation
application-gateway-kubernetes-ingress copied to clipboard

`appgw.ingress.kubernetes.io/appgw-ssl-profile` does not allow predefined ssl profiles

Open coolhome opened this issue 10 months ago • 1 comments

**Is your feature request related to a problem? Please describe. ** Predefined SSL Profiles exists without creating SSL Profile records for all Application Gateways. When you try to use a predefined SSL Policy your controller will emit the following error:

ignoring Ingress <redact> as it requires Application Gateway <redact> to have pre-installed ssl profile 'AppGwSslPolicy20220101'

Additional Information about these policies:

Get-AzApplicationGatewaySslPredefinedPolicy
MinProtocolVersion Name
------------------ ----
TLSv1_0            AppGwSslPolicy20150501
TLSv1_1            AppGwSslPolicy20170401
TLSv1_2            AppGwSslPolicy20170401S
TLSv1_2            AppGwSslPolicy20220101
TLSv1_2            AppGwSslPolicy20220101S

Describe the solution you'd like The ability to set predefined ssl policies using the names above.

coolhome avatar Apr 04 '24 13:04 coolhome

I believe it's worth mentioning that AppGwSslPolicy20220101 is an SSL policy name and the issue is about having AGIC create a SSL profile using the SSL policy provided via annotations?

c3-davidtran avatar Apr 29 '24 13:04 c3-davidtran