Regarding the TLS passtrough, you'll have to:
- Check what changed from Traefik v1.7 to v2.0 by checking the migration guide at https://docs.traefik.io/v2.0/migration/v1-to-v2/
- Define an "IngressRouteTCP" object (check https://docs.traefik.io/v2.0/routing/providers/kubernetes-crd/ for more informations), specifying the tls passthrough option