tycho.yaml

---
apiVersion: v1
kind: Service
metadata:
  name: tycho
  namespace: external-services
  labels:
    app: tycho
spec:
  type: ExternalName
  externalName: tycho-cluster.corp
  ports:
    - port: 443
      targetPort: 443
      protocol: TCP
      name: https
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: tycho
  namespace: external-services
  annotations:
    kubernetes.io/ingress.class: traefik-external
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`tycho.domain.com`)
      kind: Rule
      services:
        - name: tycho
          namespace: external-services
          port: https
          scheme: https
  tls:
    secretName: domain-com-production-tls