apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: harbor-core-ingress namespace: default annotations: cert-manager.io/cluster-issuer: letsencrypt-production traefik.ingress.kubernetes.io/router.entrypoints: websecure spec: rules: - host: &host "oci.${SECRET_NEW_DOMAIN}" http: paths: - path: / pathType: Prefix backend: service: name: harbor port: number: 80 tls: - hosts: - *host secretName: wildcard-main-tls