Hello everyone.
My issue:
Previously, when we using the Nginx Ingress Controller, we used annotations on the Ingress something like:
annotations:
``nginx.ingress.kubernetes.io/service-upstream:`` “true”
``nginx.ingress.kubernetes.io/upstream-vhost:`` echo.default.svc.cluster.local
This way, the Nginx Ingress Controller routed traffic to the Istio Mesh with the correct hostname and to the correct ports\IPs.
Now, by default, NGF adds the pod IP addresses from endpointslices into the upstreams.
Important note: the PeerAuthentication is configured as STRICT.
How I can do that NGF uses the correct host (the FQDN name of the Kubernetes Service) and service IP addresses in its upstream configuration?
Version of NGF and/or NGINX:
Gateway API 1.5
NGF 2.5.1
Istio 1.26.3
Kubernetes 1.32