1. Namespace: {{ include "lab.namespace" . }}

2. Point DNS (or /etc/hosts for local-only) at the Ingress controller:
{{- range $name, $ing := .Values.ingresses }}
{{- if $ing.enabled }}
   {{ $ing.host }}
{{- end }}
{{- end }}

3. Open simulators (TLS via cert-manager / Let's Encrypt when enabled):
{{- range $name, $ing := .Values.ingresses }}
{{- if $ing.enabled }}
{{- $https := or $ing.tls $.Values.certManager.enabled }}
   http{{ if $https }}s{{ end }}://{{ $ing.host }}{{ $ing.path | default "/" }}
{{- end }}
{{- end }}

{{- if .Values.certManager.enabled }}

cert-manager ClusterIssuer: {{ include "lab.clusterIssuer" . }}
{{- if .Values.certManager.createClusterIssuer }}
  (created by this chart; email={{ .Values.certManager.email }})
{{- else }}
  (expected to already exist in the cluster)
{{- end }}
{{- end }}

Configure namespace / hosts / TLS under `.Values.namespace`, `.Values.ingresses`, `.Values.certManager`.