streams-manifests/keycloak/base/keycloak-ingress.yaml

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: keycloak
  namespace: keycloak
  annotations:
    cert-manager.io/issuer: "letsencrypt"
    acme.cert-manager.io/http01-edit-in-place: "true"
spec:
  ingressClassName: nginx
  defaultBackend:
    service:
      name: keycloak
      port:
        number: 80
  tls:
    - hosts:
      - keycloak.streams.sunet.se
      secretName: keycloak-tls
      - kcadmin.streams.sunet.se
      secretName: kcadmin-tls
  rules:
    - host: keycloak.streams.sunet.se
      http:
        paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: keycloak
              port:
                number: 80
    - host: kcadmin.streams.sunet.se
      http:
        paths:
        - path: /
          pathType: Prefix
          backend:
            service:
              name: keycloak
              port:
                number: 80