Split AGIC ingress resources when backend path prefixes must differ

The backend-path-prefix annotation affects the entire ingress resource, not just the first rule in an example.

Resilient network core with engineered blue and gold data paths.
DSE visual intelligenceNetworks & infrastructureGuide · 2 min read
Executive summary

What you need to know

The backend-path-prefix annotation affects the entire ingress resource, not just the first rule in an example.

Potentially affected

Kubernetes ingress resources managed by Application Gateway Ingress Controller with backend path overrides.

DSE recommendation

Group paths by their required backend prefix before applying the ingress-level annotation.

Source facts

The AGIC backend-path-prefix annotation configures an HTTP setting with a backend path override. Microsoft warns that its single-rule example does not limit annotation scope: the annotation applies across the ingress resource and affects every specified path.

Rules that need different backend path prefixes must be defined in separate ingress resources, even when they use the same service. Microsoft Learn.

Applicability

Review the actual AGIC ingress, all of its path rules and the backend path expected by each application. Do not transfer this annotation behavior to another ingress controller without checking its own documentation.

DSE recommendation

DSE recommends comparing the complete ingress rule set before adding a prefix override to fix one application path. Separate paths that require different prefixes into the documented resource arrangement, with the application owner reviewing the resulting route map. Avoid accepting a one-path test as evidence that neighboring routes retain their intended backend paths.

Verification

Use an approved environment to request each affected path and inspect the path actually received at the backend. Include neighboring rules sharing the original ingress and confirm the intended separation after an authorized split. Check the rendered Application Gateway configuration as well as the application response. Preserve the ingress manifests and path-by-path outcomes so later consolidation does not silently reintroduce a shared override.

Official references

Microsoft Learn: Application Gateway Ingress Controller annotations. Source retrieved September 9, 2026.

Primary reference

Review the official source

Application Gateway Ingress Controller annotations | Microsoft Learn · Verified September 9, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE