ingress:
  enabled: true
  className: traefik
  host: oldipmi.brunner.ninja
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: 'true'
    traefik.ingress.kubernetes.io/router.middlewares: oldimpi-oldipmi-authentik@kubernetescrd
networkPolicy:
  ingressFrom:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: default
      podSelector:
        matchLabels:
          app.kubernetes.io/name: traefik
          app.kubernetes.io/instance: traefik-default
  # Cilium policy supplies external egress with explicit cluster exclusions.