StreamSets DataOps Platform Kubernetes manifest for SDC + Service + Ingress with TLS all the way down

dataops-sdc-svc-ingress.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: streamsets-deployment-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
  name: streamsets-deployment-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
  namespace: ns1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: streamsets-deployment-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
  template:
    metadata:
      labels:
        app: streamsets-deployment-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
    spec:
      containers:
        - env:
            - name: STREAMSETS_DEPLOYMENT_ID
              value: cfa81f1d-baf1-4d7d-9136-e0114a083bc9:8030c2e9-1a39-11ec-a5fe-97c8d4369386
            - name: STREAMSETS_DEPLOYMENT_TOKEN
              valueFrom:
                secretKeyRef:
                  key: token
                  name: streamsets-deployment-secret-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
                  optional: false
            - name: STREAMSETS_DEPLOYMENT_SCH_URL
              value: https://na01.hub.streamsets.com
          image: streamsets/datacollector:5.4.0
          name: streamsets-engine-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
          resources:
            requests:
              memory: 1Gi
              cpu: 1
          volumeMounts:
            - mountPath: /etc/sdc/onefoursix.jks
              name: onefoursix-keystore
              subPath: onefoursix.jks
      dnsPolicy: Default
      volumes:
        - name: onefoursix-keystore
          secret:
            secretName: onefoursix-keystore
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: streamsets-deployment-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
  name: sdc1
  namespace: ns1
spec:
  type: ClusterIP
  ports:
    - name: http
      port: 18630
      targetPort: 18630
      protocol: TCP
  selector:
    app: streamsets-deployment-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/ssl-redirect: \"false\"
    nginx.ingress.kubernetes.io/rewrite-target: /$2
    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
  labels:
    app: streamsets-deployment-cfa81f1d-baf1-4d7d-9136-e0114a083bc9
  name: sdc1
  namespace: ns1
spec:
  tls:
    - hosts:
        - aks.onefoursix.com
      secretName: streamsets-tls
  rules:
    - host: aks.onefoursix.com
      http:
        paths:
          - path: /sdc1(/|$)(.*)
            pathType: Prefix
            backend:
              service:
                name: sdc1
                port:
                  number: 18630