diff --git a/kube/deploy/core/monitoring/victoria/cluster/ingress.yaml b/kube/deploy/core/monitoring/victoria/cluster/ingress.yaml
new file mode 100644
index 00000000..7abe7419
--- /dev/null
+++ b/kube/deploy/core/monitoring/victoria/cluster/ingress.yaml
@@ -0,0 +1,25 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: vmsingle
+  namespace: monitoring
+  annotations:
+    nginx.ingress.kubernetes.io/whitelist-source-range: |
+      ${IP_JJ_V4}
+spec:
+  ingressClassName: "nginx-internal"
+  rules:
+    - host: &host "${APP_DNS_VMSINGLE}"
+      http:
+        paths:
+          - pathType: Prefix
+            path: "/"
+            backend:
+              service:
+                name: vmsingle-victoria
+                port:
+                  name: http
+  tls:
+    - hosts:
+        - *host