This looks promising: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes
https://kubernetes.github.io/ingress-nginx/examples/auth/basic/
kubectl create secret generic basic-auth --from-file=auth
kubectl -n monitoring create secret generic basic-auth --from-file=auth