From 3e6ea3f80085e000df6f03d3d50fe036930c40a5 Mon Sep 17 00:00:00 2001
From: Vaibhav Pathak <vaibhav.pathak@Vaibhavs-MacBook-Air.local>
Date: Mon, 19 Jan 2026 16:47:28 +0530
Subject: [PATCH] Fix Ingress: https port configured with dns mapping

---
 environment-provisioner/workflow-template.yaml | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/environment-provisioner/workflow-template.yaml b/environment-provisioner/workflow-template.yaml
index d215a4a..89efb67 100644
--- a/environment-provisioner/workflow-template.yaml
+++ b/environment-provisioner/workflow-template.yaml
@@ -416,7 +416,21 @@ spec:
                 - name: ingress.hosts[0].paths[0].path
                   value: "/"
                 - name: ingress.hosts[0].paths[0].pathType
-                  value: "Prefix"$DEPENDENCY_URL_PARAMS$CUSTOM_HELM_PARAMS
+                  value: "Prefix"
+                # TLS Configuration for HTTPS
+                - name: ingress.tls[0].hosts[0]
+                  value: "${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"
+                - name: ingress.tls[0].secretName
+                  value: "${SANITIZED_SERVICE}-${NAMESPACE}-tls"
+                # Annotations for cert-manager and external-dns
+                - name: ingress.annotations.nginx\.kubernetes\.io/force-ssl-redirect
+                  value: "true"
+                - name: ingress.annotations.nginx\.kubernetes\.io/ssl-redirect
+                  value: "true"
+                - name: ingress.annotations.cert-manager\.io/cluster-issuer
+                  value: "letsencrypt-prod"
+                - name: ingress.annotations.external-dns\.alpha\.kubernetes\.io/hostname
+                  value: "${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"$DEPENDENCY_URL_PARAMS$CUSTOM_HELM_PARAMS
           destination:
             server: https://kubernetes.default.svc
             namespace: $NAMESPACE
@@ -428,7 +442,7 @@ spec:
               - CreateNamespace=false
               - ServerSideApply=true
         EOF
-            echo "  Ingress URL: http://${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"
+            echo "  Ingress URL: https://${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"
             else
               # No Helm chart - create simple deployment manifest
               echo "Creating deployment manifest for service: $service"