<div dir="ltr"><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">Hello,</p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">I want to add support for an ssl_engine + ssl_certificate/key directives in
the nignx.conf that configures an nginx server for ingress on kubernetes.</p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">This functionality is not provided by default, and I read that Snippets may
be the recommended way to add such support.</p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">Could you please assist me in adding such support?
The ssl_engine should be part of the main-snippets but the
ssl_certificate/key are under http and then under server, so not sure if
http-snippets or server-snippets should be used.</p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">For example, I tried setting the ssl_engine as follows:</p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">read -d '' conf << EOF<br>       ssl_engine mscryptpfx;<br>EOF<br><br>helm install ingress-nginx-new ingress-nginx/ingress-nginx \<br>    --set controller.replicaCount=2 \<br>    --set controller.nodeSelector."kubernetes\.io/os"=linux \<br>    --set defaultBackend.nodeSelector."kubernetes\.io/os"=linux \<br>    --set controller.service.annotations."service\.beta\.kubernetes\.io/azure-load-balancer-health-probe-request-path"=/healthz \<br>    --set enable-snippets=true \<br>    --set-string controller.config.main-snippets="$conf"<br></p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">But this wasn't reflected in the nginx.conf of the ingress pod.</p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">If anyone could point me to a similar configuration sample, that would be very helpful.</p><p style="box-sizing:border-box;margin-top:0px;margin-bottom:1rem;white-space:pre-wrap;color:rgb(33,37,41);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";font-size:14px">Thank you!</p></div>