{"action":"opened","issue":{"url":"https://api.github.com/repos/nginxinc/kubernetes-ingress/issues/332","repository_url":"https://api.github.com/repos/nginxinc/kubernetes-ingress","labels_url":"https://api.github.com/repos/nginxinc/kubernetes-ingress/issues/332/labels{/name}","comments_url":"https://api.github.com/repos/nginxinc/kubernetes-ingress/issues/332/comments","events_url":"https://api.github.com/repos/nginxinc/kubernetes-ingress/issues/332/events","html_url":"https://github.com/nginxinc/kubernetes-ingress/issues/332","id":347823084,"node_id":"MDU6SXNzdWUzNDc4MjMwODQ=","number":332,"title":"ssl-services seems not working","user":{"login":"bappr","id":8669741,"node_id":"MDQ6VXNlcjg2Njk3NDE=","avatar_url":"https://avatars0.githubusercontent.com/u/8669741?v=4","gravatar_id":"","url":"https://api.github.com/users/bappr","html_url":"https://github.com/bappr","followers_url":"https://api.github.com/users/bappr/followers","following_url":"https://api.github.com/users/bappr/following{/other_user}","gists_url":"https://api.github.com/users/bappr/gists{/gist_id}","starred_url":"https://api.github.com/users/bappr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bappr/subscriptions","organizations_url":"https://api.github.com/users/bappr/orgs","repos_url":"https://api.github.com/users/bappr/repos","events_url":"https://api.github.com/users/bappr/events{/privacy}","received_events_url":"https://api.github.com/users/bappr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-08-06T08:16:43Z","updated_at":"2018-08-06T08:16:43Z","closed_at":null,"author_association":"NONE","body":"**Describe the bug**\r\n`ssl-services` does not enable `proxy_pass https://...` in the nginx conf.\r\n\r\n**To Reproduce**\r\nSteps to reproduce the behavior:\r\n1. I have this ingress template:\r\n```\r\napiVersion: extensions/v1beta1\r\nkind: Ingress\r\nmetadata:\r\n  annotations:\r\n    kubernetes.io/ingress.class: nginx\r\n    nginx.org/ssl-services: \"passbolt\"\r\n  labels:\r\n    chart: passbolt-0.1.0\r\n    heritage: Tiller\r\n    release: passbolt\r\nspec:\r\n  rules:\r\n  - host: passbolt.kintohub.com\r\n    http:\r\n      paths:\r\n      - backend:\r\n          serviceName: passbolt\r\n          servicePort: 443\r\n        path: /\r\n  tls:\r\n  - hosts:\r\n    - passbolt.kintohub.com\r\n    secretName: ssl-kintohub\r\n```\r\n2. When I push this template on K8S, the certs are mounted correctly in the nginx pod.\r\nBut I cannot reach `https://passbolt.kintohub.com` -> Error 400 Bad Request\r\n3. I look at `/etc/nginx/nginx.conf` and I can see that the proxy_pass is set to `http`, not to `https`.\r\nSwitching manually from `http` to `https` and reloading the nginx conf works.\r\n\r\n**Expected behavior**\r\nAnnotation `nginx.org/ssl-services: \"passbolt\"` should update my nginx conf and replace `proxy_pass http://passbolt.kintohub.com` with `proxy_pass https://passbolt.kintohub.com`\r\n\r\n**Your environment**\r\n* Version of the Ingress Controller - release version or a specific commit\r\n`gcr.io/google_containers/nginx-ingress-controller:0.9.0-beta.15`\r\n* Version of Kubernetes\r\n```\r\nClient Version: version.Info{Major:\"1\", Minor:\"11\", GitVersion:\"v1.11.0\", GitCommit:\"91e7b4fd31fcd3d5f436da26c980becec37ceefe\", GitTreeState:\"clean\", BuildDate:\"2018-06-27T22:29:25Z\", GoVersion:\"go1.10.3\", Compiler:\"gc\", Platform:\"darwin/amd64\"}\r\nServer Version: version.Info{Major:\"1\", Minor:\"9+\", GitVersion:\"v1.9.7-gke.3\", GitCommit:\"9b5b719c5f295c99de68ffb5b63101b0e0175376\", GitTreeState:\"clean\", BuildDate:\"2018-05-31T18:32:23Z\", GoVersion:\"go1.9.3b4\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n```\r\n* Kubernetes platform (e.g. Mini-kube or GCP)\r\nGCP\r\n* Using NGINX or NGINX Plus\r\nNGINX\r\n"}}
{"actor":{"display_login":"bappr"}}