# IngressRoute does not respect entrypoints

**URL:** <https://community.traefik.io/t/ingressroute-does-not-respect-entrypoints/5207>\
**Category:** Traefik v2\
**Tags:** kubernetes-crd\
**Created:** [March 31, 2020, 10:18am UTC](https://community.traefik.io/t/ingressroute-does-not-respect-entrypoints/5207 "2020-03-31T10:18:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![overheadhunter](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/overheadhunter/32/1762_2.png) [@overheadhunter](https://community.traefik.io/u/overheadhunter)\
**Post date:** [March 31, 2020, 10:18am UTC](https://community.traefik.io/t/ingressroute-does-not-respect-entrypoints/5207/1 "2020-03-31T10:18:48Z")

</div>

I have the following IngressRoute definition (mostly taken from the [dashboard docs](https://docs.traefik.io/v2.2/operations/dashboard/) but added https):

```yaml
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: traefik-dashboard
  namespace: traefik
spec:
  entrypoints: # Note the missing "web" entrypoint
    - websecure
  routes:
  - match: Host(`traefik.example.com`)
    kind: Rule
    services:
    - name: api@internal
      kind: TraefikService
    middlewares:
      - name: admin-basic-auth
        namespace: traefik
  tls:
    certResolver: letsencrypt

```

Despite the fact that I specified only the `websecure` entrypoint, the `web` entrypoint is also used for this IngressRoute.

Here is my question: Why?

* * *

Possibly related issue: [Traefik not respecting entrypoint constraints](https://community.containo.us/t/traefik-not-respecting-entrypoint-constraints/1706)

---

<div class="post-metadata">

**Author:** ![SantoDE](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/santode/32/393_2.png) [@SantoDE](https://community.traefik.io/u/SantoDE)\
**Post date:** [March 31, 2020, 10:46am UTC](https://community.traefik.io/t/ingressroute-does-not-respect-entrypoints/5207/2 "2020-03-31T10:46:08Z")

</div>

Hey @overheadhunter

What version are you running? 🙂

---

<div class="post-metadata">

**Author:** ![overheadhunter](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/overheadhunter/32/1762_2.png) [@overheadhunter](https://community.traefik.io/u/overheadhunter)\
**Post date:** [March 31, 2020, 10:57am UTC](https://community.traefik.io/t/ingressroute-does-not-respect-entrypoints/5207/3 "2020-03-31T10:57:03Z")

</div>

> [@SantoDE](#):
>
> What version are you running? 🙂

I'm running Traefik 2.2.0 final

---

<div class="post-metadata">

**Author:** ![SantoDE](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/santode/32/393_2.png) [@SantoDE](https://community.traefik.io/u/SantoDE)\
**Post date:** [March 31, 2020, 12:05pm UTC](https://community.traefik.io/t/ingressroute-does-not-respect-entrypoints/5207/4 "2020-03-31T12:05:35Z")

</div>

Can you provide me also with your static configuration? 🙂

---

<div class="post-metadata">

**Author:** ![overheadhunter](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/overheadhunter/32/1762_2.png) [@overheadhunter](https://community.traefik.io/u/overheadhunter)\
**Post date:** [March 31, 2020, 12:22pm UTC](https://community.traefik.io/t/ingressroute-does-not-respect-entrypoints/5207/5 "2020-03-31T12:22:59Z")

</div>

The static config is done via CLI args:

```bash
 --log.level=DEBUG
 --api
 --entrypoints.web.address=:80
 --entryPoints.web.http.redirections.entryPoint.to=websecure
 --entryPoints.web.http.redirections.entryPoint.scheme=https
 --entryPoints.web.http.redirections.entryPoint.permanent=true
 --entrypoints.websecure.address=:443
 --providers.kubernetescrd
 --providers.kubernetesingress
 --providers.kubernetesingress.namespaces=default,traefik
 --certificatesresolvers.letsencrypt.acme.tlschallenge
 --certificatesresolvers.letsencrypt.acme.email=webmaster@example.com
 --certificatesresolvers.letsencrypt.acme.storage=acme.json
 # Please note that this is the staging Let's Encrypt server.
 # Once you get things working, you should remove that whole line altogether.
 --certificatesresolvers.letsencrypt.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory

```