I'm running Rancher v2.6.3 and I have a cluster with a Django workload built all on top of AWS. The deployment has a cluster ip port set up, I have an ingress created with a prefix rule pointing at my deployment. I've installed the nginx-ingress helm chart with the following service annotations:
service.beta.kubernetes.io/aws-load-balancer-protocol: http service.beta.kubernetes.io/aws-load-balancer-ssl-ports: https service.beta.kubernetes.io/aws-load-balancer-ssl-cert: my-cert-arn
Neither of these annotations are present but I've tried adding and removing them both together and individually at various points. I believe one is deprecated:
backend-protocol: "HTTP" secure-backends: "false"
All of my infrastructure in AWS looks good and HTTP works just fine, however when I try to visit the site using SSL, I get a 400 Bad Request error showing "The plain HTTP request was sent to HTTPS port". The SSL certificate on that page is valid.
What am I doing wrong regarding HTTPS traffic?