I struggled quite a bit to get legacy TLS protocols working properly for nginx-ingress on AKS. I tried with both the annotation and configmap provided in the official documents but the first had no effect and the latter refused to work from a syntactic point of view when passed in with the controller config parameter with a helm –set. I finally got this working by utilizing –set-string instead to set inidvidual values in the configuration like so: