Internal Ingress with HTTPS

[julio-costa]

I'm considering implementing an internal ingress to route traffic between two applications hosted in GCP through this internal load balancer. Currently, I use the external one due to ease of implementation.

My question is whether it's necessary to implement HTTPS on this internal load balancer, given that it's only accessible within my VPC. If this is considered a best practice, what would be the recommended approach for generating an internal certificate? Would using the Certificate Manager be a good option?

Thank you!

[jayeshmahajan · Accepted solution]

it depends on what kind of business transaction you are doing. However its best practices to do it over https and its mandatory if you are dealing with PII, PCI and PHI or some other critical data. cert manager will be your best option to automate and management for internal certs