diff --git a/k8s/kevisual.cn/kevisual-apps/app.yaml b/k8s/kevisual.cn/kevisual-apps/app.yaml
new file mode 100644
index 0000000..4a49d2a
--- /dev/null
+++ b/k8s/kevisual.cn/kevisual-apps/app.yaml
@@ -0,0 +1,21 @@
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: cnb-kevisual-https
+  namespace: default
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - match: Host(`cnb.kevisual.cn`)
+      kind: Rule
+      services:
+        - name: kevisual-external
+          port: 3005
+          serversTransport: websocket-transport
+      middlewares:
+        - name: websocket-headers
+  tls:
+    certResolver: letsencrypt
+---
\ No newline at end of file