Documentation

apiVersion: v1 kind: Service metadata: name: istio-ingressgateway namespace: istio-system annotations: service.beta.kubernetes.io/aws-load-balancer-type: "nlb" service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing" service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:ap-south-1:497836541334:certificate/3f55b4c5-3ad8-4816-84a5-dd6e6c31d909" service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443" service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "http" spec: type: LoadBalancer selector: istio: ingressgateway ports:

name: http2 port: 80 # Service port 80 targetPort: 8080 # Container port 8080 (istio-proxy)
name: https port: 443 # Service port 443 (NLB HTTPS) targetPort: 8080 # Forward to HTTP port in Istio

Istiog HTTPS.yaml Istiogateway Nlb