readme

Signed-off-by: omar <omar.hammami@solo.io>

Author: puertomontt

pkg/i2gw/implementations/kgateway/README.md

@@ -59,6 +59,8 @@ The command should generate Gateway API and Kgateway resources.
 - `nginx.ingress.kubernetes.io/limit-burst-multiplier`
 - `nginx.ingress.kubernetes.io/proxy-send-timeout`
 - `nginx.ingress.kubernetes.io/proxy-read-timeout`
+- `nginx.ingress.kubernetes.io/ssl-redirect`: When set to `"true"`, adds a `RequestRedirect` filter to HTTPRoute rules that redirects HTTP to HTTPS with a 301 status code.
+- `nginx.ingress.kubernetes.io/force-ssl-redirect`: When set to `"true"`, adds a `RequestRedirect` filter to HTTPRoute rules that redirects HTTP to HTTPS with a 301 status code. Treated identically to `ssl-redirect`.
 
 ### Backend Behavior
 
@@ -110,6 +112,7 @@ Examples:
 - Body size annotations control `spec.buffer.maxRequestSize`
 - Rate limit annotations control `spec.rateLimit.local.tokenBucket`
 - Timeout annotations control `spec.timeouts.request` or `streamIdle`
+- SSL redirect annotations add `RequestRedirect` filters to HTTPRoute rules
 
 ## BackendConfigPolicy Projection
 

pkg/i2gw/providers/ingressnginx/README.md

@@ -126,6 +126,16 @@ The ingress-nginx provider currently supports translating the following annotati
 
 ---
 
+### SSL Redirect
+
+- `nginx.ingress.kubernetes.io/ssl-redirect`: When set to `"true"`, enables SSL redirect for HTTP requests. For the Kgateway implementation, this maps to a `RequestRedirect` filter on HTTPRoute rules that redirects HTTP to HTTPS with a 301 status code.
+
+- `nginx.ingress.kubernetes.io/force-ssl-redirect`: When set to `"true"`, enables SSL redirect for HTTP requests. This annotation is treated exactly the same as `ssl-redirect`. For the Kgateway implementation, this maps to a `RequestRedirect` filter on HTTPRoute rules that redirects HTTP to HTTPS with a 301 status code.
+
+**Note:** Both annotations are supported and treated identically. If either annotation is set to `"true"` (case-insensitive), SSL redirect will be enabled. The redirect filter is added at the rule level in the HTTPRoute, redirecting all HTTP traffic to HTTPS.
+
+---
+
 ## Provider Limitations
 
 - Currently, kgateway is the only supported implementation-specific emitter.