diff --git a/Chart.yaml b/Chart.yaml
index 2518d95445d4687c96de0a7f00b06d097b8454cd..cb52984c3683d4bb206fa9c16ffdee8db146e9cb 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v1
 appVersion: 0.0.2
 description: cache deployment
 name: cache
-version: 0.0.2
+version: 0.0.3
 icon: "https://www.vereign.com/wp-content/themes/vereign2020/images/vereign-logo.svg"
diff --git a/README.md b/README.md
index 98632dc774f22497bf17ff74d52c76068bdd4f91..e007a30096f8a62e587d56b1a97845b1d2a2beda 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # cache
 
-![Version: 0.0.2](https://img.shields.io/badge/Version-0.0.2-informational?style=flat-square) ![AppVersion: 0.0.2](https://img.shields.io/badge/AppVersion-0.0.2-informational?style=flat-square)
+![Version: 0.0.3](https://img.shields.io/badge/Version-0.0.3-informational?style=flat-square) ![AppVersion: 0.0.2](https://img.shields.io/badge/AppVersion-0.0.2-informational?style=flat-square)
 
 cache deployment
 
@@ -24,6 +24,14 @@ cache deployment
 | image.repository | string | `"eu.gcr.io/vrgn-infra-prj"` |  |
 | image.sha | string | `""` | Image sha, usually generated by the CI Uses image.tag if empty |
 | image.tag | string | `""` | Image tag Uses .Chart.AppVersion if empty |
+| ingress.annotations."cert-manager.io/cluster-issuer" | string | `"letsencrypt-production-http"` |  |
+| ingress.annotations."kubernetes.io/ingress.class" | string | `"nginx"` |  |
+| ingress.annotations."kubernetes.io/ingress.global-static-ip-name" | string | `"dev-light-public"` |  |
+| ingress.annotations."nginx.ingress.kubernetes.io/rewrite-target" | string | `"/$2"` |  |
+| ingress.enabled | bool | `true` |  |
+| ingress.frontendDomain | string | `"gaiax.vereign.com"` |  |
+| ingress.frontendTlsSecretName | string | `"cert-manager-tls"` |  |
+| ingress.tlsEnabled | bool | `true` |  |
 | log.encoding | string | `"json"` |  |
 | log.level | string | `"debug"` |  |
 | metrics.enabled | bool | `true` | Enable prometheus metrics |
@@ -44,7 +52,7 @@ cache deployment
 | security.runAsGid | int | `0` | Group used by the apps |
 | security.runAsNonRoot | bool | `false` | by default, apps run as non-root |
 | security.runAsUid | int | `0` | User used by the apps |
-| service.port | int | `8083` |  |
+| service.port | int | `8080` |  |
 
 ----------------------------------------------
 Autogenerated from chart metadata using [helm-docs v1.10.0](https://github.com/norwoodj/helm-docs/releases/v1.10.0)
diff --git a/templates/ingress.yaml b/templates/ingress.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..d757af54f3d03c8abb8a5f3016f544e8604cffd4
--- /dev/null
+++ b/templates/ingress.yaml
@@ -0,0 +1,29 @@
+{{- if .Values.ingress.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ template "app.name" . }}
+  namespace: {{ .Release.Namespace }}
+  annotations:
+{{ toYaml .Values.ingress.annotations | indent 4 }}
+  labels:
+    {{- include "app.labels" . | nindent 4 }}
+spec:
+{{- if .Values.ingress.tlsEnabled }}
+  tls:
+    - hosts:
+        - {{ .Values.ingress.frontendDomain }}
+      secretName: {{ .Values.ingress.frontendTlsSecretName }}
+{{- end }}
+  rules:
+    - host: {{ .Values.ingress.frontendDomain }}
+      http:
+        paths:
+          - path: /{{ .Release.Namespace }}/{{ template "app.name" . }}(/|$)(.*)
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ template "app.name" . }}
+                port:
+                  number: {{ .Values.service.port }}
+{{- end }}
\ No newline at end of file
diff --git a/values.yaml b/values.yaml
index 96033833901ba4505c4bc121f2626ca0f105ddc2..2b83b2b0a31b05672db64e65b74403fd41a4c937 100644
--- a/values.yaml
+++ b/values.yaml
@@ -84,7 +84,7 @@ security:
 ##
 ##
 service:
-  port: 8083
+  port: 8080
 
 cache:
   http:
@@ -101,3 +101,15 @@ redis:
   pass: ""
   db: 0
   expiration: 1h
+
+ingress:
+  enabled: true
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production-http
+    kubernetes.io/ingress.class: nginx
+    kubernetes.io/ingress.global-static-ip-name: dev-light-public
+    nginx.ingress.kubernetes.io/rewrite-target: /$2
+  tlsEnabled: true
+  frontendDomain: gaiax.vereign.com
+  frontendTlsSecretName: cert-manager-tls
+