diff --git a/infrastructure/kube-sphere/ingress.yml b/infrastructure/kube-sphere/ingress.yml
new file mode 100644
index 0000000..5c05894
--- /dev/null
+++ b/infrastructure/kube-sphere/ingress.yml
@@ -0,0 +1,21 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: kubesphere-external-ingress
+  namespace: kube-system
+  annotations:
+    kubernetes.io/ingress.class: traefik-external
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`kubesphere.local.fascinated.cc`)
+      kind: Rule
+      middlewares:
+        - name: default-headers
+          namespace: traefik
+      services:
+        - name: ks-console
+          port: 80
+  tls:
+    secretName: fascinated-cc
diff --git a/infrastructure/kube-sphere/kustomization.yaml b/infrastructure/kube-sphere/kustomization.yaml
index 5f50469..922996c 100644
--- a/infrastructure/kube-sphere/kustomization.yaml
+++ b/infrastructure/kube-sphere/kustomization.yaml
@@ -6,3 +6,4 @@ resources:
   - namespace.yaml
   - config.yaml
   - installer.yaml
+  - ingress.yaml