http2 and OKD

[dkoci]

Hi.
Does anyone have any experience with enabling HTTP2 on OKD? In my case, I would only need HTTP2 for specific routes.

[krzyspvfr]

Bump.
Tried http2 on 4.19.0-okd-scos.9 and I can't get it to work. Anyone, anything?

[titou10titou10]

works for me. on OKD 4.19.0-okd-scos.19 but was working with any v4.19 version (and before) and also on v4.20+ on all routes
I use haproxy as loadbalancer in front of OKD in a separate vm. PROXY protocol is also enabled (Has to be configures in haproxy...)
As said in the doc:

To enable the use of HTTP/2 for a connection from the client to an HAProxy instance, a route must specify a custom certificate.

ref: Enable or disable HTTP/2 on Ingress Controllers, Enabling HTTP/2

After install is complete and having assigned private certs to API server and ingress controller:

oc annotate ingresses.config/cluster ingress.operator.openshift.io/default-enable-http2=true

oc patch ingresscontroller.operator default -n openshift-ingress-operator --type=merge --patch-file ingresscontroller-operator_patch.yaml

ingresscontroller-operator_patch.yaml:
  spec:
    endpointPublishingStrategy:
      type: HostNetwork
     hostNetwork:
         protocol: PROXY