Function HTTP trigger on HTTPS

Question

Hi Team,

If i am running Azure Function HTTP triggers in Kubernetes and i expose the traffic as node port by default the application is listening on port 80 (unsecure), how can i convert the application to listen on HTTPS (Secure) with an SSL Cert?

From what we can tell, when you deploy functions in Kubernetes it uses Kestrel web server to service the calls. Can we just modify the ASP.NET Core configuration to do both HTTP and HTTPS? or will this not work and the SSL termination has to occur on the ingress controller and between the ingress and the pod it is http (unsecure) traffic?

Answer 1

Hi @Lev Goronshtein ,

Similar query answered here : https://learn.microsoft.com/en-us/answers/questions/933109/azure-function-core-tool-http-trigger-to-https.html?childToView=935701#answer-935701

As you mentioned, SSL termination happens at the Ingress controller however it doesnt mean that apps running on AKS would not listen to https traffic. The communication between the Ingress and Pods happens through port 80 but this is only internal.

https://learn.microsoft.com/en-us/azure/aks/concepts-network#ssltls-termination

If SSL binding is done for the app running on AKS, then you can modify the ASP.net core configuration to listen to http and https traffic.

Feel free to reach out to me if you have any questions or concerns.