apiVersion: v1 kind: Service metadata: name: windmill namespace: external-services spec: externalName: noctowl.cascade.strudelline.net type: ExternalName --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: windmill namespace: external-services annotations: haproxy-ingress.github.io/ssl-redirect: "true" #haproxy-ingress.github.io/backend-protocol: "h1-ssl" spec: ingressClassName: haproxy rules: - host: windmill.strudelline.net http: paths: - path: / pathType: Prefix backend: service: name: windmill port: number: 8444 tls: - hosts: - windmill.strudelline.net secretName: wildcard-tls