K8S Ingress/SVC for "TLS Termination Proxy" - productboard

productboard-tls-proxy.yml

---
apiVersion: v1
kind: Service
metadata:
  name: ext-productboard-tls-proxy
spec:
  type: ExternalName
  externalName: portal.productboard.com
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ext-productboard-tls-proxy-ingress
  annotations:
    external-dns.alpha.kubernetes.io/hostname: "roadmap.mydomain.com"
    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
    nginx.ingress.kubernetes.io/proxy-buffer-size: "8k"
    ingress.kubernetes.io/upstream-vhost: "portal.mydomain.com"
spec:
  rules:
  - host: "roadmap.mydomain.com"
    http: &http_rule
      paths:
      - path: /
        backend:
          serviceName: ext-productboard-tls-proxy
          servicePort: 443
  tls: # < placing a host in the TLS config will indicate a cert should be created
    - hosts:
        - "roadmap.mydomain.com"
      secretName: letsencrypt-prod