<p>Given following AKS advisor recommendation <em>&quot;Kubernetes clusters should be accessible only over HTTPS&quot;</em> with following remediation steps:</p>
<ol>
<li>Disable HTTP by including the kubernetes.io/ingress.allow-http annotation in your ingress manifest. Set the value of the annotation to &quot;false&quot;.</li>
<li>Add the Transport Layer Security (TLS) configuration to your ingress manifest. After making your changes, redeploy the updated ingress object.</li>
</ol>
<p>I added the annotation <code>kubernetes.io/ingress.allow-http: &quot;false&quot;</code> to my ingress resource. TLS configuration is IMHO fulfilled too, this results in following ingress manifest:</p>
<pre><code>kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.allow-http: &quot;false&quot;
    kubernetes.io/ingress.class: nginx
    meta.helm.sh/release-name: my-release-name
    meta.helm.sh/release-namespace: my-namespace
    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
    nginx.ingress.kubernetes.io/rewrite-target: /$1
  creationTimestamp: &quot;2021-09-28T12:37:21Z&quot;
  generation: 1
  labels:
    app.kubernetes.io/managed-by: Helm
  name: my-service
  namespace: my-namespace
  resourceVersion: &quot;xxx&quot;
  uid: xxx
spec:
  rules:
  - host: my-service.my-domain.com
    http:
      paths:
      - backend:
          service:
            name: my-service
            port:
              number: 443
        path: /(.*)
        pathType: ImplementationSpecific
  tls:
  - hosts:
    - my-service.my-domain.com
    secretName: my-ingress-tls
status:
  loadBalancer:
    ingress:
    - ip: 10.xxx.xxx.xxx
</code></pre>
<p>... but the resource is still being listed for this recommendation. What do I miss here, what should I change in order to fulfill this recommendation?</p>

sl3dg3
<p>Kindly use below annotations in Ingress resource to resolve this alert</p>
<pre><code>kubernetes.io/ingress.allow-http: &quot;false&quot;    
nginx.ingress.kubernetes.io/force-ssl-redirect: &quot;true&quot;   
</code></pre>
