What you need to know
The backend-path-prefix annotation affects the entire ingress resource, not just the first rule in an example.
Potentially affected
Kubernetes ingress resources managed by Application Gateway Ingress Controller with backend path overrides.
DSE recommendation
Group paths by their required backend prefix before applying the ingress-level annotation.
Source facts
The AGIC backend-path-prefix annotation configures an HTTP setting with a backend path override. Microsoft warns that its single-rule example does not limit annotation scope: the annotation applies across the ingress resource and affects every specified path.
Rules that need different backend path prefixes must be defined in separate ingress resources, even when they use the same service. Microsoft Learn.
Applicability
Review the actual AGIC ingress, all of its path rules and the backend path expected by each application. Do not transfer this annotation behavior to another ingress controller without checking its own documentation.
DSE recommendation
DSE recommends comparing the complete ingress rule set before adding a prefix override to fix one application path. Separate paths that require different prefixes into the documented resource arrangement, with the application owner reviewing the resulting route map. Avoid accepting a one-path test as evidence that neighboring routes retain their intended backend paths.
Verification
Use an approved environment to request each affected path and inspect the path actually received at the backend. Include neighboring rules sharing the original ingress and confirm the intended separation after an authorized split. Check the rendered Application Gateway configuration as well as the application response. Preserve the ingress manifests and path-by-path outcomes so later consolidation does not silently reintroduce a shared override.
Official references
Microsoft Learn: Application Gateway Ingress Controller annotations. Source retrieved September 9, 2026.
Review the official source
Application Gateway Ingress Controller annotations | Microsoft Learn · Verified September 9, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE