I hope that’s all it takes! I’m afraid that your suggestion is necessary, but not sufficient. It could definitely save a step after he gets https figured out, though. I’ve been fighting (off and on) for weeks on my bare metal k8s setup to get https ingress working. It’s easy enough on GKE (and presumably AWS as well) if you follow the guides.