apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: minio-certificate namespace: minio spec: secretName: minio-skrd-fun-tls dnsNames: - "minio.skrd.fun" issuerRef: name: letsencrypt-prod kind: ClusterIssuer --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: minio-api-certificate namespace: minio spec: secretName: minio-api-skrd-fun-tls dnsNames: - "minio-api.skrd.fun" issuerRef: name: letsencrypt-prod kind: ClusterIssuer --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: minio namespace: minio annotations: traefik.ingress.kubernetes.io/router.middlewares: default-allow-local-only@kubernetescrd, default-redirect-https@kubernetescrd spec: ingressClassName: traefik rules: - host: minio.skrd.fun http: paths: - path: / pathType: Prefix backend: service: name: minio port: number: 9001 tls: - secretName: minio-skrd-fun-tls --- apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: minio-api namespace: minio annotations: traefik.ingress.kubernetes.io/router.middlewares: default-allow-local-only@kubernetescrd, default-redirect-https@kubernetescrd spec: ingressClassName: traefik rules: - host: minio-api.skrd.fun http: paths: - path: / pathType: Prefix backend: service: name: minio port: number: 9000 tls: - secretName: minio-api-skrd-fun-tls