Contour 0.3 adds support for HTTPS (TLS/SSL) ingress by integrating Envoy's SNI support.
Enabling TLS support requires Contour version 0.3 or later. You must also add an entry for port 443 to your contour service object.
If you deploy behind an AWS Elastic Load Balancer, see EC2 ELB PROXY protocol support for special instructions.