In the case of an AWS environment where SSL (ACM) termination is done with ALB, what kind of settings are there? about serving HOT 1 CLOSED

How are you provisioning the ALB?

/triage needs-user-input

Essentially you want to ensure that the ALB port that's being terminated 443 is being mapped to the Istio Ingress Gateway port of 80 (or 8080 whatever the unencrypted ingress).

http-protocol: Redirected

This is for programming the Istio resources we create to do the redirect. If you're doing this at the ALB then don't set this but instead configure the ALB to do that

namespace-wildcard-cert-selector: {}

Don't set this option - since this is used for automatic external domain certificate provisioning which you don't need since you have a wildcard certificate configured at the ALB.

config-domain

Set your wildcard domain here

config-certmanager

Knative doesn't program the ALB - so you wouldn't need to use cert manager to provision certificates

from serving.