apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: app namespace: toolrate annotations: cert-manager.io/cluster-issuer: letsencrypt-prod spec: ingressClassName: traefik rules: - host: tools.example.com http: paths: - path: / pathType: Prefix backend: service: name: app port: number: 8080 tls: - hosts: - tools.example.com secretName: app-tls