Fix Ingress: https port configured with dns mapping

environment-provisioner/workflow-template.yaml

@@ -416,7 +416,21 @@ spec:
                 - name: ingress.hosts[0].paths[0].path
                   value: "/"
                 - name: ingress.hosts[0].paths[0].pathType
-                  value: "Prefix"$DEPENDENCY_URL_PARAMS$CUSTOM_HELM_PARAMS
+                  value: "Prefix"
+                # TLS Configuration for HTTPS
+                - name: ingress.tls[0].hosts[0]
+                  value: "${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"
+                - name: ingress.tls[0].secretName
+                  value: "${SANITIZED_SERVICE}-${NAMESPACE}-tls"
+                # Annotations for cert-manager and external-dns
+                - name: ingress.annotations.nginx\.kubernetes\.io/force-ssl-redirect
+                  value: "true"
+                - name: ingress.annotations.nginx\.kubernetes\.io/ssl-redirect
+                  value: "true"
+                - name: ingress.annotations.cert-manager\.io/cluster-issuer
+                  value: "letsencrypt-prod"
+                - name: ingress.annotations.external-dns\.alpha\.kubernetes\.io/hostname
+                  value: "${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"$DEPENDENCY_URL_PARAMS$CUSTOM_HELM_PARAMS
           destination:
             server: https://kubernetes.default.svc
             namespace: $NAMESPACE
@@ -428,7 +442,7 @@ spec:
               - CreateNamespace=false
               - ServerSideApply=true
         EOF
-            echo "  Ingress URL: http://${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"
+            echo "  Ingress URL: https://${SANITIZED_SERVICE}-${NAMESPACE}.${INGRESS_DOMAIN}"
             else
               # No Helm chart - create simple deployment manifest
               echo "Creating deployment manifest for service: $service"