How to set azure app gateway ingress in one namespace and target service istio-ingress is in another namespace in kubernetes?

Uday Kiran Reddy (ureddy) 86

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: server-ingress
  namespace: istio-ingress
  annotations:
    kubernetes.io/ingress.class: azure/application-gateway
    appgw.ingress.kubernetes.io/backend-protocol: "http"
    appgw.ingress.kubernetes.io/cookie-based-affinity: "true"
    cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
  tls:
    - hosts:
        - dev1.myproduct.com
      secretName: product-cert-secret1
    - hosts:
        - dev2.myproduct.com
      secretName: product-cert-secret2
  rules:
    - host: dev1.myproduct.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: istio-ingress
                port:
                  number: 80
    - host: dev2.myproduct.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: istio-ingress
                port:
                  number: 80

deherman-MSFT 35,636 Reputation points Microsoft Employee

2023-10-18T21:38:48.41+00:00

@Uday Kiran Reddy (ureddy)

To further troubleshoot this, we're going to enable a free, one time technical support ticket. Please email the following to AzCommunity@microsoft.com and we'll get back to you promptly:

• Subject: "Attn: deherman - "

• Email body: Your Subscription ID

• Email body: A link to this thread so we can validate and expedite the request

If you don't receive a response within 24 hours, please reply to the thread so we can investigate.
Uday Kiran Reddy (ureddy) 86 Reputation points

2023-10-20T02:33:48.9066667+00:00

@deherman-MSFT I don’t think we need an enterprise support just for the sake of this single query.

@Anonymous @KarishmaTiwari-MSFT could you suggest something on this too.
Uday Kiran Reddy (ureddy) 86 Reputation points

2023-10-20T02:34:38.39+00:00

@deherman-MSFT I don’t think we need an enterprise support just for the sake of this single query.

@Anonymous @KarishmaTiwari-MSFT could you suggest something on this too
KarishmaTiwari-MSFT 19,032 Reputation points Microsoft Employee

2023-10-20T16:22:07.0733333+00:00

@Uday Kiran Reddy (ureddy) Can you please share your end goal, can you create the ingress in the same namespace of the service?
Uday Kiran Reddy (ureddy) 86 Reputation points

2023-10-22T13:59:21.92+00:00

Hi Karishma, that would complicate the structure as we don't want other resources, the istio service mesh here, as part of our product namespace. Could you please just tell how the azure appgateway ingress which will be on the namespace1 say, should point to a service in namespace2. That is end goal.
KarishmaTiwari-MSFT 19,032 Reputation points Microsoft Employee

2023-10-24T22:48:18.0733333+00:00

@Uday Kiran Reddy (ureddy) Checking with the internal team.
KarishmaTiwari-MSFT 19,032 Reputation points Microsoft Employee

2023-10-27T04:37:59.8233333+00:00

@Uday Kiran Reddy (ureddy)

The problem is that in Kubernetes API spec, the IngressBackend doesn't have a field for specifying the namespace of the backend service. and it expects the service to be in the namespace of the Ingress object.

Kubernetes API Reference Docs

Share via

How to set azure app gateway ingress in one namespace and target service istio-ingress is in another namespace in kubernetes?