apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    alb.ingress.kubernetes.io/certificate-arn: TMPL_CERTIFICATE_ARN
    alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS": 443}]'
    alb.ingress.kubernetes.io/load-balancer-attributes: access_logs.s3.enabled=true,access_logs.s3.bucket=TMPL_ACCESS_LOG_BUCKET_NAME,access_logs.s3.prefix=nginx-access-logs,routing.http.drop_invalid_header_fields.enabled=true,deletion_protection.enabled=true
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/success-codes: 200,404
    alb.ingress.kubernetes.io/target-type: ip
    alb.ingress.kubernetes.io/wafv2-acl-arn: TMPL_DS_WAF_ID
    alb.ingress.kubernetes.io/ssl-redirect: '443'
    alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
    external-dns.alpha.kubernetes.io/hostname: www.ds.TMPL_LOGICAL_REGION.aws.TMPL_HOSTED_ZONE_NAME
    kubernetes.io/ingress.class: alb
  name: nginx-ingress
  namespace: kube-system
spec:
  rules:
  - host: www.ds.TMPL_LOGICAL_REGION.aws.TMPL_HOSTED_ZONE_NAME
    http:
      paths:
      - backend:
          service:
            name: ingress-nginx-read-controller
            port:
              number: 80
        path: /
        pathType: Prefix