OCI Native Ingress Controller did not clear stale listener SSL configuration when an Ingress was changed/configured as TCP passthrough.
Steps to reproduce:
- Create or have an OCI LB listener with SSL configured.
- Update the Ingress using the same listener port with:
oci-native-ingress.oraclecloud.com/protocol: TCP
- Observe that the listener remains use-ssl=true instead of clearing SSL config and doing TLS passthrough to the backend.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
oci-native-ingress.oraclecloud.com/http-listener-port: "10901"
oci-native-ingress.oraclecloud.com/protocol: TCP
name: sauron-dev-test-thanos-grpc
namespace: dev-test
spec:
ingressClassName: dev-test-oci-native
rules:
- http:
paths:
- backend:
service:
name: dev-test1-thanos-query
port:
number: 10901
pathType: ImplementationSpecific
When the listener should look like this based on the above ingress of TLS passthrough:

OCI Native Ingress Controller did not clear stale listener SSL configuration when an Ingress was changed/configured as TCP passthrough.
Steps to reproduce:
oci-native-ingress.oraclecloud.com/protocol: TCPWhen the listener should look like this based on the above ingress of TLS passthrough: