IIUC K3s uses traefik by default. I knew that there is an annotation to redirect to SSL ports on the ingress. Did this change recently? The annoation used to be

'<http://traefik.ingress.kubernetes.io/redirect-entry-point|traefik.ingress.kubernetes.io/redirect-entry-point>': 'https',

I would defer to the Traefik docs on that