A router with TLS enabled (from the Ingress tls section) never matches on the plain web entrypoint, so entrypoints web,websecure on the Ingress itself still 404'd on :80. Keep the Ingress on websecure only and add an IngressRoute on web with the redirect-https middleware. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <[email protected]>