How to skip backend tls verification

[zhiweiv]

There is already GEP for this case, but it has been Provisional status for a long time.
At the meanwhile is there workaround we can use in NGF to do this?

My case:

As an application developer, I want the option to disable backend TLS certificate verification on a per-backend basis, so I can connect to services using dynamically generated or self-signed certificates during development or testing.

[dhurley]

Hi @zhiweiv, I took a look to see if there is any workaround that you could use in NGF but unfortunately I don't think there is anything we can do at the moment to workaround this issue.

[zhiweiv]

Yes, i also tried some hacks but no luck. I am wondering is there plan to support this case in NGF? We are migrating from ingress nginx to NGF, ingress nginx works on this case.

[sjberman]

Let me check on the status of the GEP, because we will likely want to implement the official Gateway API way of doing this instead of introducing a new field in some other policy.

[sjberman]

Actively being worked on: kubernetes-sigs/gateway-api#4779

[zhiweiv]

Thanks, i will watch on that.