# HG changeset patch
# User drewp@bigasterisk.com
# Date 1686961434 25200
# Node ID e30741ab51a7af8560da940f2d42aed59f62255d
# Parent  842b5487556cb647b120c0010ea583c2d71e49b1
add ingress

diff -r 842b5487556c -r e30741ab51a7 service/powerEagle/ingress.yaml
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/service/powerEagle/ingress.yaml	Fri Jun 16 17:23:54 2023 -0700
@@ -0,0 +1,28 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: powereagle
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    ingress.pomerium.io/allow_public_unauthenticated_access: "false"
+    ingress.pomerium.io/pass_identity_headers: "true"
+    ingress.pomerium.io/preserve_host_header: "true"
+    ingress.pomerium.io/policy: |
+      allow:
+        or: 
+          - { email: { is: "drewpca@gmail.com" }}
+          - { email: { is: "kelsimp@gmail.com" }}
+    ingress.pomerium.io/prefix_rewrite: "/"
+    ingress.pomerium.io/allow_websockets: "true"
+spec:
+  ingressClassName: pomerium
+  rules:
+    - host: "bigasterisk.com"
+      http:
+        paths:
+          - pathType: Prefix
+            path: /powerEagle/
+            backend: { service: { name: power-eagle, port: { number: 80 } } }
+  tls:
+    - hosts: [bigasterisk.com]
+      secretName: bigasterisk.com-tls
diff -r 842b5487556c -r e30741ab51a7 service/powerEagle/skaffold.yaml
--- a/service/powerEagle/skaffold.yaml	Wed Mar 01 20:37:24 2023 -0800
+++ b/service/powerEagle/skaffold.yaml	Fri Jun 16 17:23:54 2023 -0700
@@ -14,3 +14,4 @@
   kubectl:
     manifests:
       - deploy.yaml
+      - ingress.yaml
\ No newline at end of file