Aks ingress

NAMESPACE=ingress-basic

helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm repo update

helm upgrade --install ingress-nginx ingress-nginx/ingress-nginx \
  --create-namespace \
  --namespace $NAMESPACE \
  --set controller.service.annotations."service\.beta\.kubernetes\.io/azure-load-balancer-health-probe-request-path"=/healthz \
  --set controller.service.externalTrafficPolicy=Local \
  -f internal-ingress.yaml
# --set controller.service.externalTrafficPolicy=Local disables tls passthrough and adds  X-Forwarded-For
# https://learn.microsoft.com/en-us/azure/aks/concepts-network#client-source-ip-preservation

• https://learn.microsoft.com/en-us/azure/aks/concepts-network#client-source-ip-preservation
• https://learn.microsoft.com/en-us/azure/aks/ingress-basic?tabs=azure-cli