We are experimenting with ECK (on-prem). LoadBalancer is not an option, we only have NodePort as a way to expose Elastic outside the cluster, or Ingress.
For Ingress, we terminate SSL at the ingress controller. Enabling SSL passthrough seems possible (enabling with the nginx --enable-ssl-passthrough flag), however this doesn't seem to be recommended.
We would rather turn off SSL for client traffic (yes, I know) and terminate at the ingress controller but can't see a way to do this. Is it even possible?