<p>I've setup some services and ingresses to try out the SSL termination. I had no problem at all with <code>LoadBalancer</code> and <code>NodePort</code> services as backend but it's not working at all with <code>ClusterIP</code> service.</p>

<p>Although the Ingress' backend is described as healthy, I get an HTTP error that do not come from my application.</p>

<pre><code>$ kubectl describe ing nginx-cluster-ssl-ingress
Name:           nginx-cluster-ssl-ingress
Namespace:      default
Address:        X.X.X.X
Default backend:    nginx-cluster-svc:80 (...)
TLS:
  ssl-certificate terminates
Rules:
  Host  Path    Backends
  ----  ----    --------
Annotations:
  https-target-proxy:       k8s-tps-default-nginx-cluster-ssl-ingress
  static-ip:            k8s-fw-default-nginx-cluster-ssl-ingress
  target-proxy:         k8s-tp-default-nginx-cluster-ssl-ingress
  url-map:          k8s-um-default-nginx-cluster-ssl-ingress
  backends:         {"k8s-be-30825":"HEALTHY"}
  forwarding-rule:      k8s-fw-default-nginx-cluster-ssl-ingress
  https-forwarding-rule:    k8s-fws-default-nginx-cluster-ssl-ingress
Events:
  FirstSeen LastSeen    Count   From                SubobjectPath   Type        Reason  Message
  --------- --------    -----   ----                -------------   --------    ------  -------
  28m       28m     1   {loadbalancer-controller }          Normal      ADD default/nginx-cluster-ssl-ingress
  27m       27m     1   {loadbalancer-controller }          Normal      CREATE  ip: X.X.X.X
</code></pre>

<p>The HTTP error is the following:</p>

<pre><code>$ curl http://X.X.X.X/
default backend - 404%
</code></pre>

<p>My question is quite simple: is it supposed to work with ClusterIP services? If it is supposed to as more or less written in the documentation, where should I have a look to resolve that issue?</p>

<p>Thank you!</p>

Samuel ROZE
<p><a href="https://github.com/kubernetes/kubernetes/issues/26508#issuecomment-222376886">The native GKE Ingress controller do not support <code>ClusterIP</code>, only <code>NodePort</code> is working.</a></p>

<p>Non-native Ingress controllers such as the nginx one do work with <code>ClusterIP</code> services.</p>
