Ingress

Exposing services

*.live.k8s.phl.io should be configured to resolve to the cluster’s ingress-nginx service.

To route a public hostname to a service in the cluster:

1. Create an Ingress
2. Apply the annotation kubernetes.io/ingress.class: nginx to associate with the cluster’s main ingress service
3. Apply the annotation cert-manager.io/cluster-issuer: letsencrypt-prod to enable automatic setup of an SSL certificate
4. Assign an unused hostname under .live.k8s.phl.io (every public service should start with one of these)
5. Optionally, CNAME a custom hostname to the .live.k8s.phl.io hostname and add it to the same ingress