后端服务是https，ingress需要加哪些注解，我加了注解没用，报tls错误 || The back-end service is https. What annotations need to be added to ingress? I added annotations to no avail, and reported a tls error.

[13567436138]

cat << EOF|kubectl apply --kubeconfig ~/.kube/noobaa-distribution-01 -f -
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: noobaa-mgmt
  namespace: noobaa-operator
  annotations:
    higress.io/backend-protocol: HTTPS
    higress.io/upstream-ssl-verify: "false"
spec:
  ingressClassName: higress
  tls:
  - hosts:
    - noobaa.mark.demo
    secretName: noobaa-tls  
  rules:
  - host: noobaa.mark.demo
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: noobaa-mgmt
            port:
              number: 443
EOF

---

cat << EOF|kubectl apply --kubeconfig ~/.kube/noobaa-distribution-01 -f -
apiVersion: networking.k8s.io/v1
Kind: Ingress
metadata:
  name: noobaa-mgmt
  namespace: noobaa-operator
  annotations:
    higress.io/backend-protocol: HTTPS
    higress.io/upstream-ssl-verify: "false"
spec:
  ingressClassName: higress
  tls:
  - hosts:
    - noobaa.mark.demo
    secretName: noobaa-tls
  rules:
  - host: noobaa.mark.demo
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: noobaa-mgmt
            port:
              number: 443
EOF

[CH3CHO]

建议拉取 gateway 的运行时配置并提供测试请求和对应的访问日志。如有疑问，可查看官网文档。

---

It is recommended to pull the runtime configuration of the gateway and provide test requests and corresponding access logs. If you have any questions, you can check the official website documentation.

[13567436138]

{"ai_log":"-","authority":"waf.mark.demo","bytes_received":"0","bytes_sent":"189","downstream_local_address":"10.248.0.71:80","downstream_remote_address":"100.64.0.3:13385","duration":"29","istio_policy_status":"-","method":"GET","path":"/favicon.ico","protocol":"HTTP/1.1","request_id":"1a20f2a9-6116-4ad7-8014-7796ea89f243","requested_server_name":"-","response_code":"503","response_flags":"URX,UF","route_name":"safeline/waf-dashboard-domain-ingress","start_time":"2026-04-18T04:52:24.058Z","trace_id":"-","upstream_cluster":"outbound|1443||safeline-mgt.safeline.svc.cluster.local","upstream_host":"10.248.0.58:1443","upstream_local_address":"-","upstream_service_time":"-","upstream_transport_failure_reason":"TLS_error:_Secret_is_not_supplied_by_SDS","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","x_forwarded_for":"100.64.0.3","response_code_details":"upstream_reset_before_response_started{remote_connection_failure|TLS_error:_Secret_is_not_supplied_by_SDS}"}
```

[13567436138]

root@ubuntu:~# kubectl get  ingress -n safeline --kubeconfig ~/.kube/fleet-01  waf-dashboard-domain-ingress -o yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    higress.io/backend-protocol: HTTPS
    higress.io/proxy-ssl-secret: safeline-ca-cert
    meta.helm.sh/release-name: safeline
    meta.helm.sh/release-namespace: safeline
  creationTimestamp: "2026-04-18T04:18:53Z"
  generation: 3
  labels:
    app: safeline
    app.kubernetes.io/managed-by: Helm
    chart: safeline
    heritage: Helm
    release: safeline
  name: waf-dashboard-domain-ingress
  namespace: safeline
  resourceVersion: "4386047"
  uid: ac715dff-7ac6-4dfa-9c10-ad5fd88e596a
spec:
  ingressClassName: higress
  rules:
  - host: waf.mark.demo
    http:
      paths:
      - backend:
          service:
            name: safeline-mgt
            port:
              number: 1443
        path: /
        pathType: ImplementationSpecific
status:
  loadBalancer:
    ingress:
    - ip: 192.168.10.24