<p>I am using ISTIO for service mesh in Azure kubernetes. I have configured private DNS to setup the FQDN. Currently the application is accessible over http protocol(eg: <a href="http://myapp.contoso.com" rel="nofollow noreferrer">http://myapp.contoso.com</a>) and I would like to be secured with https protocol(eg: <a href="https://myapp.contoso.com" rel="nofollow noreferrer">https://myapp.contoso.com</a>).</p>
<p>I know I have to change the service port to 443 to support https protocol however how/where do I install the SSL certificate for the application (eg: <a href="https://myapp.contoso.com" rel="nofollow noreferrer">https://myapp.contoso.com</a>)? Is there anything else to be done as well?</p>

One Developer
<p>That will depend on where do you want the SSL termination to happen, if you want that to happen inside the Azure kubernetes network, then you can do SSL termination at ingress layer.</p>
<p>Or otherwise you can also do the termination at application gateway layer of Azure ( if you want to avail this service from azure, the redirection from http to https, basic firewall features and adding the pfx certificates at the listeners can be done), ingress can also take care of these things although.</p>
<p>You can install the let's encrypt certificates by using <a href="https://docs.cert-manager.io/en/latest/getting-started/install/kubernetes.html" rel="nofollow noreferrer">this helm chart</a> and for further steps you can follow <a href="https://stackoverflow.com/questions/58423312/how-do-i-test-a-clusterissuer-solver/58436097?noredirect=1#comment103215785_58436097">this stack overflow link</a>, it shall help you in creating configurations for Istio, ppl have used this solution for Istio as well before</p>
