Kubernetes HTTPS Ingress in Google Container Engine

Question

I'm trying to expose an HTTP service running on Google Container Engine(GKE) on an HTTPS only load balancer. I want to know how I can initialize an ingress object with HTTPS only load balancer rather than regular HTTP? Or if there's any other way I can block HTTP protocol from creating load balancer. Because whenever I try and add HTTPS protocol and try and drop HTTP, it is automatically recreated later by the platform.

Ingress:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: myapp-ingress
spec:
  backend:
    serviceName: myapp-service
    servicePort: 8080

Answer 1

n order to have HTTPs service exposed only, you can block traffic on port 80 as mentioned on this link:

What you can do is block all traffic on port 80 like here:

You can block traffic on :80 through an annotation. You might want to do this if all your clients are only going to hit the loadbalancer through https and you don't want to waste the extra GCE forwarding rule, eg:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: test
  annotations:
    kubernetes.io/ingress.allow-http: "false"
spec:
  tls:
  # This assumes tls-secret exists.
  # To generate it run the make in this directory.
  - secretName: tls-secret
  backend:
    serviceName: echoheaders-https
    servicePort: 80