title: The right way to handle mTLS on Kubernetes with front Load-Balancer
body: <p>We have a Kubernetes cluster hosting a multitude of applications. It contains an Ingress controller and a front FortiWeb load-balancer.
  <a href="https://i.stack.imgur.com/jgNVX.png" rel="nofollow noreferrer">Kubernetes Diagram</a></p>
  <p>The Fortiweb terminated TLS connections and forwards the traffic to the Kubernetes Ingress controller.</p>
  <p>Now, a new requirement has arrived, where we need to configure mTLS for a high-security web application. I have seen the tutorials on how to configure this on Kubernetes ingress controllers, but what I don't understand - is how does this work with the front load-balancer (which currently does TLS offloading and some inspection).</p>
  <p>Do we need to configure both: the ingress and the load-balancer? Or only one? And which one?</p>