{
  private_ingress | default = {
    name          | default = "private-ingress",
    namespace     | default = "ingress-private",
    image         | default = "reg.librecloud.online/solera/sozu:2.0.1",
    sidecar_image | default = "reg.librecloud.online/solera/sozuctl-sidecar:2.0.1",
    tls_rotation  | default = 'reloader,
    cluster_issuer | default = "letsencrypt-prod-librecloud",
    routes        | default = [],

    requires | default = {
      ports = [
        { port = 80,  exposure = 'private },
        { port = 443, exposure = 'private },
      ],
      credentials = [],
    },

    provides | default = {
      service   = "private-ingress",
      port      = 443,
      endpoints = ["/", "/:80"],
    },

    operations | default = {
      install = true,
      update  = true,
      delete  = true,
      health  = true,
    },

    live_check | default = {
      strategy = 'k8s_pods,
      scope    = 'cp_only,
    },
  },
}