{
  name        = "private_ingress",
  version     = "1.0.0",
  description = "VPN-reachable L7 ingress for *.in.librecloud.online — single L4 LoadBalancer + sozu host-based routing + cert-manager CSI driver TLS",
  tags        = ["ingress", "proxy", "vpn", "internal", "tls"],
  modes       = ["cluster"],
  dependencies = [
    { component = "cert_manager", constraint = "csi_driver_enabled = true", kind = 'Required },
  ],
  provides    = [{ id = "private-l7-ingress", version = "1.0", interface = "https" }],
  requires    = [
    { capability = "cilium-lb-ipam",         kind = 'Required },
    { capability = "cert-manager-csi-driver", kind = 'Required },
  ],
  conflicts_with = [],
  best_practices = ["bp_007"],
}