Azure-docs: HTTPS usage to access example application

[Cecildt]

Can the documentation be updated with guidance on using HTTPS to access the example application? Currently only http access works. Must a separate TLS setup be followed to access the example application via HTTPS with HTTP application routing enabled?

Works
http://party-clippy.471756a6-e744-4aa0-aa01-89c4d162a7a7.canadaeast.aksapp.io

Don't work
https://party-clippy.471756a6-e744-4aa0-aa01-89c4d162a7a7.canadaeast.aksapp.io

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 51a32f9e-c92f-412b-d460-567f3c542b98
• Version Independent ID: fad073ab-a376-1535-7bc4-deaca1d98dd9
• Content: HTTP application routing add-on on Azure Kubernetes Service (AKS)
• Content Source: articles/aks/http-application-routing.md
• Service: container-service
• GitHub Login: @lachie83
• Microsoft Alias: laevenso

[mimckitt]

Thanks for the feedback! We are currently investigating and will update you shortly.

[mimckitt]

@Cecildt we have a doc on creating an HTTPS ingress controller. Have you checked that article yet?

https://docs.microsoft.com/en-us/azure/aks/ingress-tls

[Cecildt]

@MicahMcKittrick-MSFT , yes but it includes details on setting up another nginx ingress controller and cert-manager. On the HTTP application routing add-on page it would be easier to just list the steps needed to use a certificate to enable tls to make HTTPS connections when you are already using the HTTP application routing add-on which already creates an nginx ingress controller. Referencing to the ingress-tls page will just confuse people. Especially since setting up application routing DNS entries dynamically is so easy.

Some clarifications would be great on how to setup an SSL certificate using HTTP application routing add-on in a AKS cluster when creating a new DNS entry. Is a separate SSL certificate needed for each DNS entry or can I use a wild-card SSL certificate. Must I use CA authority to dynamically create a cert every time a DNS entry is made.

I hope it is clear now. Please let me know if you have more questions and thank you for your support.

[mimckitt]

@Cecildt thanks for the extra details :)

I believe you can just implement the same kind of yaml that is in the tls doc I mentioned to the HTTP application.

@lachie83 can you confirm on this one?

[mimckitt]

@Cecildt just FYI, I am still working to confirm this. Many people are busy with Ignite this week so responses have been delayed.

[lachie83]

@Cecildt @MicahMcKittrick-MSFT I agree that we should add some details about SSL setup for http-application-routing specifically on the same docs. Give me a week to see how much work it would require.

[mimckitt]

@lachie83 any update on this?

[Cecildt]

Any updates on progress @lachie83?

[elluvium]

Any updates?

[davidferlay]

Also looking for details about SSL setup) What's up @lachie83 ?

[zr-msft]

There's a note at the top of the doc calling out the recommend approach for setting up TLS:
https://docs.microsoft.com/en-us/azure/aks/http-application-routing

I believe this resolves the issue.

please-close