apiVersion: traefik.containo.us/v1alpha1
kind: MiddlewareTCP
metadata:
  name: ipallowlist
  namespace: default
spec:
  ipAllowList:
    sourceRange:
      - 127.0.0.1/32

---
apiVersion: traefik.containo.us/v1alpha1
kind: MiddlewareTCP
metadata:
  name: ipallowlist
  namespace: foo
spec:
  ipAllowList:
    sourceRange:
      - 127.0.0.1/32
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP
metadata:
  name: test.route
  namespace: default

spec:
  entryPoints:
    - foo

  routes:
    - match: HostSNI(`foo.com`)
      services:
        - name: whoamitcp
          port: 8000

      middlewares:
        - name: ipallowlist
        - name: ipallowlist
          namespace: foo