apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: auth
  namespace: admin
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
  tls:
    - hosts: [auth.carr.pub]
      secretName: auth-carr-pub-tls
  rules:
    - host: auth.carr.pub
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service: {name: authelia, port: {number: 9091}}
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: admin-portal
  namespace: admin
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    traefik.ingress.kubernetes.io/router.middlewares: admin-authelia-auth@kubernetescrd
spec:
  tls:
    - hosts: [admin.carr.pub]
      secretName: admin-carr-pub-tls
  rules:
    - host: admin.carr.pub
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service: {name: portal, port: {number: 80}}
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: grafana
  namespace: monitoring
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    traefik.ingress.kubernetes.io/router.middlewares: admin-authelia-auth@kubernetescrd
spec:
  tls:
    - hosts: [grafana.carr.pub]
      secretName: grafana-carr-pub-tls
  rules:
    - host: grafana.carr.pub
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service: {name: grafana, port: {number: 3000}}