apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

  name: static

  annotations:

    cert-manager.io/issuer: letsencrypt-prod

    ingress.pomerium.io/allow_public_unauthenticated_access: "true"

    ingress.pomerium.io/pass_identity_headers: "true"

    ingress.pomerium.io/preserve_host_header: "true"

spec:

  ingressClassName: pomerium

  rules:

    - host: "williamperttula.com"

      http:

        paths:

          - { pathType: Prefix, path: /, backend: { service: { name: nginx, port: { number: 11444 } } } }

  tls:

    - hosts: [williamperttula.com]

      secretName: williamperttula.com-tls