fix(ingress-nginx): rm L7 HTTP 80 netpols, force-ssl-redirect

kube/deploy/core/ingress/ingress-nginx/app/common-values.yaml

@@ -18,6 +18,7 @@ controller:
     disable-access-log: "false"
     log-format-escape-json: "true"
     # hardening
+    force-ssl-redirect: "true"
     hsts-max-age: "31449600"
     hsts-preload: "true"
     ssl-protocols: "TLSv1.3 TLSv1.2"

kube/deploy/core/ingress/ingress-nginx/app/netpol.yaml

@@ -30,9 +30,6 @@ spec:
         - ports:
             - port: "80"
               protocol: TCP
-          rules:
-            http:
-              - {}
         - ports:
             - port: "443"
               protocol: TCP
@@ -155,9 +152,6 @@ spec:
               protocol: TCP
             - port: "80"
               protocol: TCP
-          rules:
-            http:
-              - {}
     # connect to Rook-Ceph RGW/S3 object store in-cluster
     - toServices:
         - k8sServiceSelector: