I did manage to get this all functioning on the private microk8s implementation with an internal CA. I ended up switching the k8s ingress controller to manage the termination and all the necessary CORS configuration for the app. Happy to share my notes if other are interested. (I have not yet implemented the fission component though)