I want to access an internal website through a kubernetes cluster which is accessible from a user via https.

In Detail:

We have a group of users which have restricted access to our kubernetes cluster. The cluster itself has access to an externalService (website). The users can’t access the website directly.

My idea was that a kubernetes-service or pod could tunnel the traffic. So I don’t need a redirect, which I successfully tried with an externalService.

Maybe a simple example helps to understand my needs:

User A can access the url my-internal-website.kubernetes-cluster.com which can be handled by an ingress rule inside the kubernetes-cluster.
User A can’t access the url https://internal.url directly.
The kubernetes-cluster itself (nodes) can access the url https://internal.url

I would like to route the traffic from A to the kubernetes-cluster (via ingress rule my-internal-website.kubernetes-cluster.com to a pod or service which retrieves the url https://internal.url and “replaces” links etc. with my-internal-website.kubernetes-cluster.com for navigation purposes.

In addition the cluster can only access the url https://internal.url using a http proxy.

Do you have any suggestions how to solve that? I tried with ExternalName services, put only implemented a redirect which won’t work in my scenario.

Many Thanks