Application Gateway and Azure Kubernetes services using backend with https:443

thanakrit rungchatkamol 1

Hi All,

I would like to change AKS backend services using port from 80 to use new port to 443.

i tried with this apply yaml.

apiVersion: v1 kind: Service metadata: name: my-internal-aks-service namespace: default annotations: service.beta.kubernetes.io/azure-load-balancer-internal: "true" # This annotation specifies an internal load balancer spec: type: LoadBalancer selector: app: my-app ports:

protocol: TCP port: 443 # External port (ILB front-end) targetPort: 443 # Port on the container (service back-end)

I seen services in AKS created with port 443 but, when i add backend pool in Azure Application Gateway to that port 443. it not working.

in the Application Gateway backend health show error about block access to port 443.

I am not sure in case the Application Gateway routes to the AKS backend service using port 443, how should I configure or set up in AKS and Application Gateway to make it work with services port 443?

BR,

Thanakrit

Nikhil Duserla 2,585 Reputation points Microsoft Vendor

2024-10-15T15:34:05.3866667+00:00

Hi @thanakrit rungchatkamol,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Could you please provide more information about whether you are trying to configure the AKS on the Azure Application Gateway backend pool, or if you are trying to configure the ingress controller add-on for AKS cluster with application gateway instance?

Regards,

Nikhil Duserla
thanakrit rungchatkamol 1 Reputation point

2024-10-16T06:57:14.7133333+00:00

Hi @Nikhil Duserla

current, we configure aks service behide application gateway with port 80 and can try access to url with port 80 from web browser normally through application gateway.

but, i want to change service port to use 443 instead 80. then i've add services to port 443 with commnad

after added. i see service with port 443 created success.

and try to add listener on application gateway for new backend service with port 443. occur services backend unhealthty.

i try to check with network troubleshooting form network level not any fw or nsg block access connection to aks backendpool.

try connect within virtual network bypass application gateway with web browser in VM. it can access to services with port 443.

but when try to access from external through application gateway to aks services port 443 not working.

i'm not sure i should configure AGIC or not? or another way to configure more on aks and application gateway for can use ingress to aks with services port 443.

BR,

Thanakrit
Nikhil Duserla 2,585 Reputation points Microsoft Vendor

2024-10-17T13:01:52.79+00:00

Hi @thanakrit rungchatkamol,

Thank you for sharing the information.

Changing the port from 80 to 443 won't fulfill your needs. We recommend setting up the Ingress controller add-on for your AKS cluster using an Application Gateway instance.

Please visit the links below for more information:

Application Gateway Ingress Controller (AGIC)-https://zcusa.951200.xyz/en-us/azure/application-gateway/ingress-controller-overview

Enable the ingress controller add-on for a new AKS cluster with a new application gateway instance-https://zcusa.951200.xyz/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-new

Enable application gateway ingress controller add-on for an existing AKS cluster with an existing application gateway-https://zcusa.951200.xyz/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-existing

If you have any further queries, do let us know.
Nikhil Duserla 2,585 Reputation points Microsoft Vendor

2024-10-18T16:07:51.7833333+00:00

Hi @thanakrit rungchatkamol,

We would like to know whether you have resolved the issue or if you need help.

Share via

Application Gateway and Azure Kubernetes services using backend with https:443

Your answer