Migrate from Nginx: how to support https -> https without sidecar

Networking
1

I’m trying to migrate an Nginx ingress to Istio Ingress as the first step of adoption.

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ng-app-myapp
  labels:
    helm.sh/chart: thingworx-server-1.0.13
    app.kubernetes.io/name: myapp-server
    app.kubernetes.io/instance: ng-app
    app.kubernetes.io/managed-by: Helm
  annotations:
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/app-root: /Myapp
    nginx.ingress.kubernetes.io/proxy-body-size: 100m
    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
spec:
  tls:
    - hosts:
        - ng-myapp.demo.io
      secretName: aks-tls
  rules:
    - host: ng-myapp.demo.io
      http:
        paths:
          - path: /
            pathType: ImplementationSpecific
            backend:
              service:
                name: ng-app-myapp
                port:
                  name: https

I can’t find an example that supports HTTPS → HTTPS and doesn’t need a sidecar, or what’s the equivalent annotation of “nginx.ingress.kubernetes.io/backend-protocol: “HTTPS””.

Appreciate for tips.