Rancher 2 disable HTTP to HTTPS redirect

Question

SSL redirect is enabled by default in a Kubernetes NGINX ingress on Rancher 2. We changed the config map and redeployed the nginx -ingres in the system namespace, but the redirect still happens. Has someone managed to disable it?

Answer 1

Unfortunately I don't think you will be able to disable SSL in Rancher v2.

As per Randcher documentation:

For security purposes, SSL (Secure Sockets Layer) is required when using Rancher. SSL secures all Rancher network communication, like when you login or interact with a cluster.

You can find there few ways to apply this certs:

• Default Rancher-generated Self-signed Certificate
• Bring Your Own Certificate, Self-signedlink
• Bring Your Own Certificate, Signed by a Recognized CA
• Let’s Encrypt Certificatelink

Inside this doc you have hyerlinks to further Rancher docs.

As Rancher by default deploying nginx controller you should also check Rancher docs about Nginx Controller.

Answer 2

As an update, rancher can disable http -> https redirection by disabling ingress's TLS and set a custom header "X-Forwarded-Proto: https" from ingress controller -> rancher, reference: https://github.com/rancher/rancher/issues/35088