apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: hassingress annotations: cert-manager.io/cluster-issuer: letsencrypt-prod haproxy.org/whitelist: "192.168.86.0/24,10.233.71.0/24" spec: ingressClassName: haproxy rules: - host: "home.geesink.org" http: paths: - path: / pathType: Prefix backend: service: name: hasssvc port: number: 8123 tls: - secretName: hass-cert-prod hosts: - home.geesink.org