How to disable the WebSocket for specific ingress

[cbl315]

For now the ingress-nginx support websocket protocol by default, refer to here.
I want to know if there is a way to disable the websocket for a specific ingress?
In our scenario, one of the service, that expose endpoints via ingress, has some security issues with it's websocket endpoints. As a workaround, we want to disable the websocket protocol for this service.

[k8s-ci-robot]

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[cbl315]

One workaround is refused all the request with header Connection: Upgrade by annotation server-snippets:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/server-snippet: |
      if ($http_connection ~* "(upgrade)" ){
              return 400 ;
            }