Setup Kibana HTTPS with Helm chart / cert-manager.io for kubernetes

cert.yaml

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ https.cert_name }}
spec:
  secretName: {{ https.cert_name }}
  duration: 2160h # 90d
  renewBefore: 360h # 15d
  subject:
    organizations:
    - XXX
  isCA: false
  privateKey:
    algorithm: RSA
    encoding: PKCS1
    size: 2048
  usages:
    - server auth
    - client auth
  dnsNames:
  - localhost
  - 127.0.0.1
  - {{ https.dns_ingress }}
  - {{ https.dns_service }}
  issuerRef:
    name: bootstrap-bootstrap-tls
    kind: Issuer

Chart.yaml

apiVersion: v2
name: hot-kibana
type: application
version: v1.6.0
dependencies:
-   name: kibana
    repository: https://helm.elastic.co
    version: 7.13.0

kibana.yml

server.ssl:
  enabled: true
  key: /usr/share/kibana/config/certs/tls.key
  certificate: /usr/share/kibana/config/certs/tls.cert

values.yaml

kibana:
  ingress:
    annotations:
      cert-manager.io/common-name: XXXX
      kubernetes.io/tls-acme: 'true'
      nginx.ingress.kubernetes.io/backend-protocol: HTTPS
      nginx.ingress.kubernetes.io/http2-push-preload: 'true'
      nginx.ingress.kubernetes.io/proxy-ssl-verify: 'on'
    enabled: true
    hosts:
    - XXXXX
    path: /
    tls:
    - hosts:
      - XXXX
      secretName: hot-kibana-ssl
  kibanaConfig:
    kibana.yml: ....

  secretMounts:
  - name: kibana-https-certs
    path: /usr/share/kibana/config/certs
    secretName: hot-kibana-https