From d3ca57eabff7c2e0caafc02728bef800d7770917 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Fri, 19 Dec 2025 23:52:19 -0300
Subject: [PATCH] vault: backend over https with serversTransport

---
 services/vault/ingress.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/services/vault/ingress.yaml b/services/vault/ingress.yaml
index 1d9d523..c8ed24c 100644
--- a/services/vault/ingress.yaml
+++ b/services/vault/ingress.yaml
@@ -7,6 +7,8 @@ metadata:
   annotations:
     kubernetes.io/ingress.class: traefik
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/service.serversscheme: https
+    traefik.ingress.kubernetes.io/service.serversTransport: vault-to-https@kubernetescrd
 spec:
   ingressClassName: traefik
   tls: