hardening-part-2-ingress.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: external-kibana
  namespace: logging
  annotations:
    certmanager.k8s.io/acme-challenge-type: dns01
    certmanager.k8s.io/acme-dns01-provider: route53
    certmanager.k8s.io/cluster-issuer: lets-encrypt-issuer-prod
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
spec:
  rules:
  - host: kibana.<ROOT_DOMAIN>
    http:
      paths:
      - backend:
          serviceName: external-kibana
          servicePort: https
        path: /
  tls:
  - hosts:
    - kibana.<ROOT_DOMAIN>
    secretName: external-kibana-cert