443 was redirected to named port 'http' instead of 'https' (points to https://github.com/kubernetes/ingress-nginx/blob/master/deploy/provider/patch-service-without-rbac.yaml#L35) In the AWS/GCP examples it was fine ('https') so I fixed it for azure as well.