diff --git a/deploy/k8s/30-ingress.yaml b/deploy/k8s/30-ingress.yaml
index 11316d3..cf60e09 100644
--- a/deploy/k8s/30-ingress.yaml
+++ b/deploy/k8s/30-ingress.yaml
@@ -32,17 +32,17 @@ spec:
             pathType: Prefix
             backend:
               service:
-                name: fancy-dns-web
+                name: fancy-dns-console
                 port:
-                  name: admin
-          # The embedded console.
+                  name: http
+          # The console owns the UI, OIDC callback and admin API.
           - path: /
             pathType: Prefix
             backend:
               service:
-                name: fancy-dns-web
+                name: fancy-dns-console
                 port:
-                  name: admin
+                  name: http
   tls:
     - hosts: [dns.k6n.net]
       secretName: fancy-dns-tls
diff --git a/deploy/k8s/kustomization.yaml b/deploy/k8s/kustomization.yaml
index bd5c9ad..b980434 100644
--- a/deploy/k8s/kustomization.yaml
+++ b/deploy/k8s/kustomization.yaml
@@ -15,6 +15,7 @@ resources:
   - crds/rbac.yaml
   - 10-deployment.yaml
   - 20-service.yaml
+  - console/console.yaml
   - 30-ingress.yaml
 
 labels: