kubernetes ingress-nginx ingress for redirect/whitelist of access to AWS elasticsearch kibana behind oauth2-proxy

kibana-oauth2-proxy-ingress.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: kibana-doorman
  annotations:
    kubernetes.io/ingress.class: "nginx"
    nginx.ingress.kubernetes.io/use-regex: "true"
    nginx.ingress.kubernetes.io/server-snippet: |
      location = / { return 308 https://$best_http_host/_plugin/kibana; }
spec:
  tls:
  - secretName: kibana-doorman-crt
    hosts:
    - logs.example.com
  rules:
  - host: logs.example.com
    http:
      paths:
      - path: /(oauth2|ping|_plugin\/kibana|robots\.txt)
        backend:
          serviceName: kibana-doorman
          servicePort: 4180