# Ssl ingress controller

**URL:** <https://discuss.konghq.com/t/ssl-ingress-controller/5140>\
**Category:** Questions\
**Tags:** kubernetes\
**Created:** [December 12, 2019, 7:55am UTC](https://discuss.konghq.com/t/ssl-ingress-controller/5140 "2019-12-12T07:55:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jorge.guega](https://avatars.discourse-cdn.com/v4/letter/j/59ef9b/32.png) [@jorge.guega](https://discuss.konghq.com/u/jorge.guega)\
**Post date:** [December 12, 2019, 7:55am UTC](https://discuss.konghq.com/t/ssl-ingress-controller/5140/1 "2019-12-12T07:55:06Z")

</div>

I need to expose an https service with ingress, the application is a tomcat in Kubernetes and https works internally but I don’t know how to expose it with Kong ingress controller so that it goes to port 443 of the kubernetes service How can I do this?  
I could also use my own certificate in Kong ingress but I don’t know how to do it.  
I do not want to use [https://cert-manager.io/docs/](https://cert-manager.io/docs/) and prefer to handle the certificates myself.  
Thank you very much

---

<div class="post-metadata">

**Author:** ![hbagdi](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/hbagdi/32/562_2.png) [@hbagdi](https://discuss.konghq.com/u/hbagdi)\
**Post date:** [December 12, 2019, 7:21pm UTC](https://discuss.konghq.com/t/ssl-ingress-controller/5140/2 "2019-12-12T19:21:28Z")

</div>

Please look through:  
[https://kubernetes.io/docs/concepts/services-networking/ingress/#tls](https://kubernetes.io/docs/concepts/services-networking/ingress/#tls)

You can put your certificate in a secret and then use the `TLS` section to configure which hosts that cert should be used for.

---

<div class="post-metadata">

**Author:** ![jorge.guega](https://avatars.discourse-cdn.com/v4/letter/j/59ef9b/32.png) [@jorge.guega](https://discuss.konghq.com/u/jorge.guega)\
**Post date:** [December 30, 2019, 11:49am UTC](https://discuss.konghq.com/t/ssl-ingress-controller/5140/3 "2019-12-30T11:49:06Z")

</div>

Thanks Hbagdi,  
My application already has its own https certificate I just want to expose the application with Kong Ingress Controller, with Nginx ingress controller it works well by adding this annotation Is it possible to add this to Kong ingress Controller?  
annotations:  
[nginx.ingress.kubernetes.io/backend-protocol:](http://nginx.ingress.kubernetes.io/backend-protocol:) “HTTPS”

---

<div class="post-metadata">

**Author:** ![hbagdi](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/hbagdi/32/562_2.png) [@hbagdi](https://discuss.konghq.com/u/hbagdi)\
**Post date:** [December 30, 2019, 4:38pm UTC](https://discuss.konghq.com/t/ssl-ingress-controller/5140/4 "2019-12-30T16:38:50Z")

</div>

Please take a look at the KongIngress custom resource.  
The `proxy.protocol` field allows you to tune this.