# Disable HTTPS Redirect for NGINX Ingress

**URL:** <https://forums.suse.com/t/disable-https-redirect-for-nginx-ingress/16823>\
**Category:** SUSE Rancher Prime\
**Created:** [March 11, 2020, 9:29am UTC](https://forums.suse.com/t/disable-https-redirect-for-nginx-ingress/16823 "2020-03-11T09:29:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![DanMar](https://avatars.discourse-cdn.com/v4/letter/d/ecae2f/32.png) [@DanMar](https://forums.suse.com/u/DanMar)\
**Post date:** [March 11, 2020, 9:29am UTC](https://forums.suse.com/t/disable-https-redirect-for-nginx-ingress/16823/1 "2020-03-11T09:29:05Z")

</div>

An SSL redirect is enabled by default in a Kubernetes NGINX ingress. How can this be disabled?  
In the rancher GUI i have created a Load Balancer with the annotations.

[nginx.ingress.kubernetes.io/ssl-redirect:](http://nginx.ingress.kubernetes.io/ssl-redirect:) ‘false’

Bit if i open the url in chrome or firefox and add http:// the url is redirected to https://

Does anyone have an idea what is wrong?

Current implementation below:

> apiVersion: extensions/v1beta1  
> kind: Ingress  
> metadata:  
> annotations:  
> [field.cattle.io/creatorId:](http://field.cattle.io/creatorId:) u-3jglkiqgjx  
> [field.cattle.io/ingressState:](http://field.cattle.io/ingressState:) ‘{“ZGFydGVzdDA2LmxueC5hczI0LmRldi9kYXItdGVzdHMvZGFydGVzdDA2LmxueC5hczI0LmRldi8vLzgw”:“deployment:dar-tests:nginxport80”}’  
> [field.cattle.io/publicEndpoints:](http://field.cattle.io/publicEndpoints:) ‘[{“addresses”:[“81.203.253.65”],“port”:80,“protocol”:“HTTP”,“serviceName”:“dar-tests:ingress-0de29cdf772974f51f9336d60721da09”,“ingressName”:“dar-tests:dartest06.mydomain.com”,“hostname”:“[dartest06.mydomain.com](http://dartest06.mydomain.com)”,“path”:“/”,“allNodes”:true}]’  
> **[nginx.ingress.kubernetes.io/ssl-redirect:](http://nginx.ingress.kubernetes.io/ssl-redirect:) ‘false’**  
> creationTimestamp: “2020-03-11T09:18:11Z”  
> generation: 1  
> labels:  
> [cattle.io/creator:](http://cattle.io/creator:) norman  
> name: [dartest06.mydomain.com](http://dartest06.mydomain.com)  
> namespace: dar-tests  
> resourceVersion: “13943544”  
> selfLink: /apis/extensions/v1beta1/namespaces/dar-tests/ingresses/dartest06.mydomain.com  
> uid: ee9a8f8b-320c-44f2-ae5c-f1365ac4ae4b  
> spec:  
> rules:  
> -host: [dartest06.mydomain.com](http://dartest06.mydomain.com)  
> http:  
> paths:  
> - backend:  
> serviceName: ingress-0de29cdf772974f51f9336d60721da09  
> servicePort: 80  
> path: /  
> status:  
> loadBalancer:  
> ingress:  
> - ip: 81.203.253.65  
> - ip: 81.203.253.66  
> - ip: 81.203.253.67

---

<div class="post-metadata">

**Author:** ![xzzw9987](https://avatars.discourse-cdn.com/v4/letter/x/54ee81/32.png) [@xzzw9987](https://forums.suse.com/u/xzzw9987)\
**Post date:** [August 13, 2020, 5:39am UTC](https://forums.suse.com/t/disable-https-redirect-for-nginx-ingress/16823/2 "2020-08-13T05:39:38Z")

</div>

Besides the annotation you have added:  
[nginx.ingress.kubernetes.io/ssl-redirect:](http://nginx.ingress.kubernetes.io/ssl-redirect:) ‘false’,  
you should also supply another one:  
[nginx.ingress.kubernetes.io/force-ssl-redirect:](http://nginx.ingress.kubernetes.io/force-ssl-redirect:) ‘false’  
It really works.

---

<div class="post-metadata">

**Author:** ![WarGirl20](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/wargirl20/32/10936_2.png) [@WarGirl20](https://forums.suse.com/u/WarGirl20)\
**Post date:** [February 5, 2024, 10:15am UTC](https://forums.suse.com/t/disable-https-redirect-for-nginx-ingress/16823/3 "2024-02-05T10:15:37Z")

</div>

Even after adding those two annotation  
[nginx.ingress.kubernetes.io/ssl-redirect:‘false’](http://nginx.ingress.kubernetes.io/ssl-redirect:'false')  
[nginx.ingress.kubernetes.io/force-ssl-redirect:‘false’](http://nginx.ingress.kubernetes.io/force-ssl-redirect:'false')  
Doesn’t work for me?

---

<div class="post-metadata">

**Author:** ![bpedersen2](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/bpedersen2/32/9899_2.png) [@bpedersen2](https://forums.suse.com/u/bpedersen2)\
**Post date:** [February 7, 2024, 5:08pm UTC](https://forums.suse.com/t/disable-https-redirect-for-nginx-ingress/16823/4 "2024-02-07T17:08:36Z")

</div>

Make sure that not the browser already does that for you due to HSTS [1]

[1] [HTTP Strict Transport Security – Wikipedia](https://de.wikipedia.org/wiki/HTTP_Strict_Transport_Security)

---

<div class="post-metadata">

**Author:** ![wioxjk](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/wioxjk/32/9439_2.png) [@wioxjk](https://forums.suse.com/u/wioxjk)\
**Post date:** [February 15, 2024, 9:44am UTC](https://forums.suse.com/t/disable-https-redirect-for-nginx-ingress/16823/5 "2024-02-15T09:44:31Z")

</div>

Do you have an Load balancer in front of the cluster? If so, have you checked the settings there?

And as @bpedersen2 - depending on the domain, it might have HSTS, or your browser just have cached it.
