apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    appgw.ingress.kubernetes.io/waf-policy-for-path: TMPL_DS_WAF_ID
    cert-manager.io/acme-challenge-type: http01
    cert-manager.io/cluster-issuer: letsencrypt-for-o11y
  name: ingress-nginx-read
  namespace: observability
spec:
  ingressClassName: azure-application-gateway
  rules:
  - host: www.ds.TMPL_REGION.azure.TMPL_HOSTED_ZONE_NAME
    http:
      paths:
      - backend:
          service:
            name: ingress-nginx-read-controller
            port:
              number: 80
        path: /
        pathType: Prefix
  tls:
  - hosts:
    - www.ds.TMPL_REGION.azure.TMPL_HOSTED_ZONE_NAME
    secretName: ingress-read-controller
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    appgw.ingress.kubernetes.io/waf-policy-for-path: TMPL_DS_WAF_ID
  name: ingress-nginx-read-http
  namespace: observability
spec:
  ingressClassName: azure-application-gateway
  rules:
  - host: www.ds.TMPL_REGION.azure.TMPL_HOSTED_ZONE_NAME
    http:
      paths:
      - backend:
          service:
            name: ingress-nginx-read-controller
            port:
              number: 80
        path: /
        pathType: Prefix