secure-service-ingress-annotations.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    certmanager.k8s.io/acme-challenge-type: dns01
    certmanager.k8s.io/acme-dns01-provider: route53
    certmanager.k8s.io/cluster-issuer: lets-encrypt-issuer-prod
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/backend-protocol: HTTP
  name: secured-service
spec:
  rules:
  - host: service.<ROOT_DOMAIN>
    http:
      paths:
      - backend:
          serviceName: unsecure-service
          servicePort: http
        path: /
  tls:
  - hosts:
    - service.<ROOT_DOMAIN>
    secretName: secured-service-cert