apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
    nginx.ingress.kubernetes.io/whitelist-source-range: 44.231.162.131,100.20.198.224,54.188.27.23
    nginx.ingress.kubernetes.io/backend-protocol: HTTPS
  name: serverless-ops-ingress
spec:
  ingressClassName: nginx
  rules:
  - http:
      paths:
      - backend:
          service:
            name: ops-service-svc
            port:
              number: 9088
        path: /ops
        pathType: Prefix
    host: regionalsvc01.ap-southeast-3.prod.aws.tidbcloud.com
  tls:
  - hosts:
    - "regionalsvc01.ap-southeast-3.prod.aws.tidbcloud.com"
    secretName: gateway-letsencrypt-secret