I have an EKS cluster that I upgraded to 1.23. The cluster was working prior to the upgrade. I am using an ELB loadbalancer which points to an nginx-ingress controller. The ingress-controller I had to rebuild it I have looked cant seem to find what setting I missing. https is working for the landing page, but as soon as I attempt to login to my app, I get redirected to an http site. In another app since I explicitly have http turned off on that site, I get page isn't redirecting properly. I have changed the force ssl and ssl settings to true/false and no effect. Any suggestions?
my ingress annotations are:
Annotations: nginx.ingress.kubernetes.io/force-ssl-redirect: false
nginx.ingress.kubernetes.io/proxy-body-size: 100m
nginx.ingress.kubernetes.io/proxy-connect-timeout: 600
nginx.ingress.kubernetes.io/proxy-read-timeout: 600
nginx.ingress.kubernetes.io/proxy-send-timeout: 600
nginx.ingress.kubernetes.io/redirect-to-https: true
nginx.ingress.kubernetes.io/ssl-passthrough: true
nginx.ingress.kubernetes.io/use-regex: true
These are the ingress container args on the deployment:
Containers:
nginx-ingress-nginx-ingress:
Image: nginx/nginx-ingress:2.4.2
Ports: 80/TCP, 443/TCP, 9113/TCP, 8081/TCP
Host Ports: 0/TCP, 0/TCP, 0/TCP, 0/TCP
Args:
-nginx-plus=false
-nginx-reload-timeout=60000
-enable-app-protect=false
-enable-app-protect-dos=false
-nginx-configmaps=$(POD_NAMESPACE)/nginx-ingress-nginx-ingress
-default-server-tls-secret=$(POD_NAMESPACE)/nginx-ingress-nginx-ingress-default-server-tls
-ingress-class=nginx
-health-status=false
-health-status-uri=/nginx-health
-nginx-debug=true
-v=1
-nginx-status=true
-nginx-status-port=8080
-nginx-status-allow-cidrs=127.0.0.1
-report-ingress-status
-external-service=nginx-ingress-nginx-ingress
-enable-leader-election=true
-leader-election-lock-name=nginx-ingress-nginx-ingress-leader-election
-enable-prometheus-metrics=true
-prometheus-metrics-listen-port=9113
-prometheus-tls-secret=
-enable-custom-resources=true
-enable-snippets=false
-include-year=false
-disable-ipv6=false
-enable-tls-passthrough=true
-enable-preview-policies=false
-enable-cert-manager=false
-enable-oidc=false
-enable-external-dns=false
-ready-status=true
-ready-status-port=8081
-enable-latency-metrics=false
This is the configmap the deployment is using:
apiVersion: v1
data:
enable-underscores-in-headers: "true"
force-ssl-redirect: "true"
keep-alive: "600"
ssl-redirect: "false"
upstream-keepalive-timeout: "600"
use-forwarded-headers: "true"
kind: ConfigMap
metadata:
annotations:
meta.helm.sh/release-name: nginx-ingress
meta.helm.sh/release-namespace: default
creationTimestamp: "2022-12-16T18:06:49Z"
labels:
app.kubernetes.io/instance: nginx-ingress
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: nginx-ingress-nginx-ingress
helm.sh/chart: nginx-ingress-0.15.2
name: nginx-ingress-nginx-ingress
namespace: default
resourceVersion: "243438295"