users-proxy/deployment.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: users-proxy
spec:
  replicas: 1
  selector:
    matchLabels:
      app: users-proxy
  template:
    metadata:
      labels:
        app: users-proxy
    spec:
      enableServiceLinks: false
      imagePullSecrets:
        - name: regcred
      serviceAccountName: oidc-gateway
      containers:
        - name: users-proxy
          image: users-proxy
          env:
            - name: API_KEY
              value: 'changeme'
            - name: DEV_ENV
              value: 'true'
          ports:
            - containerPort: 5000
              name: metrics
---
apiVersion: v1
kind: Service
metadata:
  name: users-proxy
  labels:
    app: users-proxy
spec:
  selector:
    app: users-proxy
  ports:
  - protocol: TCP
    port: 3001
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: users-proxy
  annotations:
    kubernetes.io/ingress.class: shared
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
    external-dns.alpha.kubernetes.io/target: traefik.codemowers.ee
spec:
  rules:
  - host: users-proxy-72zn4.codemowers.ee
    http:
      paths:
      - pathType: Prefix
        path: "/"
        backend:
          service:
            name: users-proxy
            port:
              number: 3001
  tls:
  - hosts:
    - "*.codemowers.ee"