We have a whole host of hostnames we want to redirect to another hostname. This is the Way.
It takes place before cert-manager challenge solvers, effectively breaking LetsEncrypt for domains using it. There are some issues that have been filed against cert-manager and ingress-nginx solving the similar case for HTTP -> HTTPS redirect and basic auth, but not temporal-redirect specifically.
So instead we opt for an nginx pod with configuration mounted from a ConfigMap into under /etc/nginx/conf.d.
Use kubernetes/default.vars.yaml as reference and kubernetes/production.vars.yaml as example.
emsk -E production -- run -n redirects