This message was deleted.

What I do is just set up traefik with multiple ports (entrypoints), and exposed one pair of http/https ports to the internet via my FW , and left the other two for private use. I can set the

<http://traefik.ingress.kubernetes.io/router.entrypoints|traefik.ingress.kubernetes.io/router.entrypoints>

annotation to which entrypoints I want that ingress resource to be exposed on.

Hmm this seems promising — is all you need on the ingress

<http://traefik.ingress.kubernetes.io/router.entrypoints|traefik.ingress.kubernetes.io/router.entrypoints>: internalweb, internalwebsecure

? My traefik logs are saying

entryPoint \"internalwebsecure\" doesn't exist

when I go to apply it despite it existing in the helmchartconfig

Can you look at the actual traefik config and see if maybe the config didn’t take?

Yeah it seems that there was a config issue that I resolved — this solution worked, thank you!