Traefik running in kubernetes cluster can be configured to forward the request “as is” without terminating the TLS connection. It allows to setup SSL passthrough using IngressRouteTCP object (TCP routing) which is based on TCP router concept.
Create a Azure API Management service instance with custom domain (SSL cert) using PowerShell script in Azure Devops using Release Pipelines
When you create an Azure API Management service instance, Azure assigns it a subdomain of azure-api.net. you can expose your API Management endpoints using your own custom domain name, such as contoso.com.