apiVersion: networking.k8s.io/v1
kind: Ingress
metadata: 
  annotations:
    cert-manager.io/cluster-issuer: {{ tls_issuer }}
    # kubernetes.io/ingress.class: {{ ingress_class }}
{% if tls_client_ca %}    nginx.ingress.kubernetes.io/auth-tls-secret: {{ tls_client_ca }}
{% endif %}{% if tls_client_ca %}    nginx.ingress.kubernetes.io/auth-tls-verify-client: "on"
{% endif %}  name: {{ name }}
spec:
  ingressClassName: {{ ingress_class }}
  rules:
  - host: {{ host }}
    http:
      paths:
      - path: {{ path_prefix }}
        pathType: Prefix 
        backend:
          service:
            name: {{ backend }}
            port:
              number: {{ port }}
  tls:
  - hosts:
    - {{ host }}
    secretName: {{ name }}-tls-secret