# Ingress Setup

## Deploy *ingress-nginx*

Using *ingress-nginx* in [host network mode][0].  Assign the *ingress* custom
role to nodes that will handle incoming traffic (e.g. have DNS names pointed to
their addresses)

```sh
kubectl label node k8s-amd64-n{0,1,2}.pyrocufflink.blue kubernetes.io/role=ingress
kubectl create secret tls pyrocufflink-cert \
    --cert ~/certs/certificates/_.pyrocufflink.net.crt \
    --key ~/certs/certificates/_.pyrocufflink.net.key
kubectl apply -f ingress-nginx.yaml
```

[0]: https://kubernetes.github.io/ingress-nginx/deploy/baremetal/#via-the-host-network