Skip to content

Controller does not clear stale listener SSL configuration of existing Ingress changed to TCP passthrough #144

Description

@jlamillan

OCI Native Ingress Controller did not clear stale listener SSL configuration when an Ingress was changed/configured as TCP passthrough.

Steps to reproduce:

  1. Create or have an OCI LB listener with SSL configured.
  2. Update the Ingress using the same listener port with: oci-native-ingress.oraclecloud.com/protocol: TCP
  3. Observe that the listener remains use-ssl=true instead of clearing SSL config and doing TLS passthrough to the backend.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    oci-native-ingress.oraclecloud.com/http-listener-port: "10901"
    oci-native-ingress.oraclecloud.com/protocol: TCP
  name: sauron-dev-test-thanos-grpc
  namespace: dev-test
spec:
  ingressClassName: dev-test-oci-native
  rules:
  - http:
      paths:
      - backend:
          service:
            name: dev-test1-thanos-query
            port:
              number: 10901
        pathType: ImplementationSpecific
Image

When the listener should look like this based on the above ingress of TLS passthrough:

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions