only need one ingress