<p>I want to expose an HTTPS K8s service that uses a certificate derived from a custom root CA, outside the cluster using nginx ingress controller. Are the following configurations supported and if yes, how?</p>

<ol>
<li>client -- (HTTP) -- ingress -- (HTTPS) -- k8s service</li>
<li>client -- (HTTPS) -- ingress -- (HTTPS) -- k8s service</li>
</ol>

<p>Is it possible to configure nginx ingress controller such that it can do TLS and mutual-TLS with the HTTPS backend service? 
How do I provision a root certificate for backend server certificate validation to nginx ingress?
Is it possible to do SSL termination on the ingress and do mutual-TLS with the backend?</p>

<p>I was able to provision the backend server certificates using the <code>nginx.ingress.kubernetes.io/proxy-ssl-secret</code> annotation. </p>
