Integrate cse.ms wildcard cert with Traefik ingress, and key vault

[AAkindele]

Description

What:

• The aks-secure-baseline walkthrough deploys a sample application. Expose the application with a "cse.ms" domain and valid wildcard TLS certificate.

Why:

• To setup aks-secure-baseline with custom domains and a valid TLS certificate

When:

• On initial setup of an aks-secure-baseline environment

Where:

• App gateway, and Traefik ingress controller

Tasks

• [ ] Document steps needed to add a custom cse.ms certificate to aks-secure-baseline (https://github.com/retaildevcrews/ngsa/issues/633)
• [ ] Design review for automating the steps with terraform and helper scripts (https://github.com/retaildevcrews/ngsa/issues/635)
• [ ] Add automated setup of the custom certificate to environment creation (https://github.com/retaildevcrews/ngsa/issues/642)
• [ ] Architecture diagram for App Gateway, Traefik, and custom certificate (https://github.com/retaildevcrews/ngsa/issues/585)

Acceptance Criteria

• Access ngsa-memory running in the cluster from internet
• Use https and cse.ms domain

Constraints

• Wild card cert is in RDC teams, will need someone with access to upload to KeyVault

References:

• References

[dsturgell]

Should we use terraform or scripting?