ingress.yaml

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: megasecond
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    ingress.pomerium.io/allow_public_unauthenticated_access: "true"
    ingress.pomerium.io/pass_identity_headers: "true"
    ingress.pomerium.io/preserve_host_header: "true"
    ingress.pomerium.io/allow_websockets: "true"
spec:
  ingressClassName: pomerium
  rules:
    - host: "megasecond.club"
      http:
        paths:
          - pathType: Prefix
            path: /
            backend: { service: { name: megasecond, port: { name: 'client' } } }
          - pathType: Prefix
            path: /server/
            backend: { service: { name: megasecond, port: { name: 'server' } } }
          - pathType: Prefix
            path: /log/rebuild/
            backend: { service: { name: megasecond, port: { name: 'clientvitelog' } } }
          - pathType: Prefix
            path: /log/server/
            backend: { service: { name: megasecond, port: { name: 'serverlog' } } }
  tls:
    - hosts: [megasecond.club]
      secretName: megasecond.club-tls