apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: apk-repository-cert
spec:
  domains:
  - apk.${domain}
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: apk-repository
  annotations:
    kubernetes.io/ingress.allow-http: "false"
    kubernetes.io/ingress.class: 'gce'
    kubernetes.io/ingress.global-static-ip-name: "apk-ip"
    networking.gke.io/managed-certificates: apk-repository-cert
    networking.gke.io/v1beta1.FrontendConfig: "ncr-default"
spec:
  defaultBackend:
    service:
      name: apk-repository
      port:
        number: 8080
---
apiVersion: cloud.google.com/v1
kind: BackendConfig
metadata:
  name: apk-repository
spec:
  iap:
    enabled: true
---
apiVersion: networking.gke.io/v1beta1
kind: FrontendConfig
metadata:
  name: ncr-default
spec:
  redirectToHttps:
    enabled: true
  sslPolicy: ncr-default