<p>I have 2 services deployed in Kubernetes both should be ssl end to end. </p>

<ol>
<li>Web based applications</li>
<li>Business service</li>
</ol>

<p>Web based Application needs sticky session, so its been exposed using Ingress.</p>

<pre><code>Web Based Application ---&gt; Ingress(HTTPS) --&gt; Service(ClusterIP) --&gt; Pods(Enabled SSL)
Business Service --&gt; Service(Load Balancer/Cluster IP) --&gt;  Pods(Enables SSL)
</code></pre>

<p>Here the requirement is Business Service should be accessible only by Web App and not by anyone else. With just HTTP, I can have ClusterIP and restrict business service access using Network policies. But, I need SSL from WebApp to Business service. It throws error("Domain name not matching") if I access using https. Is there any better way for this?</p>

user1578872
<p>It depends on how you access the <em>Business Service</em> from your <em>Web Based App</em>. You should use DNS service discovery here, see <a href="https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/" rel="nofollow noreferrer">DNS for Services and Pods
</a> and your https-certificate must reflect this <strong>URL</strong>, you could use a <strong>self-signed certificated</strong> here.</p>
