I created an ingress for a GKE cluster providing a SSL certificate. Now that ingress presents two IP adresses, one with HTTP with a port :80 and another one with HTTPS with a port 443. The problem is that when visiting the HTTPS one, it still shows NOT SECURE. I created this diagram in order to explain my architecture. Many many thanks for any advice. https://docs.google.com/drawings/d/1JLTlIFwwxNN7NK66dxM6rqhIOUQukVuFvMTRx7UGPK4/edit
Here the YAML
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
ingress.kubernetes.io/backends: '{"k8s-be-XXXXX--XXXXXXXXXXXXXXXX":"HEALTHY"}'
ingress.kubernetes.io/forwarding-rule: k8s-fw-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/https-forwarding-rule: k8s-fws-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/https-target-proxy: k8s-tps-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/ssl-cert: k8s-ssl-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/static-ip: k8s-fw-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/target-proxy: k8s-tp-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
ingress.kubernetes.io/url-map: k8s-um-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX-ingress--XXXXXXXXXXXXXXXX
creationTimestamp: "2020-10-14T05:58:37Z"
finalizers:
- networking.gke.io/ingress-finalizer
generation: 1
name: XXXXXXXXXXXXXXXX-ingress
namespace: XXXXXXXXXXXXXXXX
resourceVersion: "XXXXXXXXXXXXXXXX"
selfLink: /apis/extensions/v1beta1/namespaces/XXXXXXXXXXXXXXXX/ingresses/XXXXXXXXXXXXXXXX-ingress
uid: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
spec:
backend:
serviceName: XXXXXXXXXXXXXXXX-service
servicePort: 80
tls:
- secretName: XXXXXXXXXXXXXXXX-certificate
status:
loadBalancer:
ingress:
- ip: XXXXXXXXXXXXXXXX