apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: actual namespace: actual annotations: cert-manager.io/cluster-issuer: "letsencrypt-prod" external-dns.alpha.kubernetes.io/target: michaelthomson.ddns.net external-dns.alpha.kubernetes.io/cloudflare-proxied: "true" traefik.ingress.kubernetes.io/router.entrypoints: websecure traefik.ingress.kubernetes.io/router.tls: "true" spec: rules: - host: actual.michaelthomson.dev http: paths: - pathType: ImplementationSpecific path: / backend: service: name: actual port: name: http tls: - hosts: - actual.michaelthomson.dev secretName: actual-tls