apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: nginx-ingress
  namespace: kube-system
  annotations:
    # If the class annotation is not specified it defaults to "gce".
    kubernetes.io/ingress.class: "gce"
    networking.gke.io/managed-certificates: managed-cert
spec:
  ingressClassName: gce
  rules:
    - host: www.ds.us-central1.gcp.observability.tidbcloud.com
      http:
        paths:
          - backend:
              service:
                name: ingress-nginx-controller
                port:
                  number: 80
            path: /
            pathType: Prefix
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  # used for lb health check
  name: nginx-read-default
  namespace: kube-system
spec:
  ingressClassName: nginx
  rules:
  - http:
      paths:
      - backend:
          service:
            name: default-http-backend
            port:
              number: 80
        path: /healthz
        pathType: Prefix
---
apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: managed-cert
  namespace: kube-system
spec:
  domains:
    - www.ds.us-central1.gcp.observability.tidbcloud.com
---
apiVersion: cloud.google.com/v1
kind: BackendConfig
metadata:
  namespace: kube-system
  name: o11y-rs-backendconfig
spec:
  securityPolicy:
    name: "o11y-prod-waf-policy"
  healthCheck:
    checkIntervalSec: 8
    timeoutSec: 5
    healthyThreshold: 1
    unhealthyThreshold: 3
    type: HTTP
    requestPath: /healthz
    port: 80