Study. uk . com
  1. Home
  2. All questions
  3. Question 742

CKA study material · question 742 of 1000

An Ingress terminates TLS for shop.example.com but its rules only define a default backend with no host. Why does TLS not work?

  1. The hosts in the tls section must match the hosts named in the rules
  2. A default backend cannot be combined with TLS
  3. The Secret must live in the ingress controller's namespace
  4. SNI is disabled when a default backend is present
Show the answer

Answer: A. The hosts in the tls section must match the hosts named in the rules

TLS cannot cover the default rule, because a certificate would have to be issued for every possible subdomain; the tls hosts must correspond to hosts in the rules.

Source: Ingress (Kubernetes) — TLS

Challenge yourself on this topic → Study as cards