diff --git a/deploy/k8s/step2-servers.yaml b/deploy/k8s/step2-servers.yaml
index 5a8d849ee3864da1a6a082cb41e6b9e28a2221fc..f8aaefda7788533c316a0401adeda0946022b12c 100644
--- a/deploy/k8s/step2-servers.yaml
+++ b/deploy/k8s/step2-servers.yaml
@@ -88,7 +88,7 @@ spec:
 kind: Service
 apiVersion: v1
 metadata:
-  name: studio-devstar-server
+  name: backend-service
   namespace: studio-devstar-cn-ns
 spec:
   selector:
diff --git a/deploy/k8s/step3-ingress-gateway.yaml b/deploy/k8s/step3-ingress-gateway.yaml
index 4d5a37085169048a1545dae5515a21da1b925e71..0ded7cee54648ed6adbf0a4d751176f52d108be9 100644
--- a/deploy/k8s/step3-ingress-gateway.yaml
+++ b/deploy/k8s/step3-ingress-gateway.yaml
@@ -6,6 +6,8 @@ apiVersion: networking.k8s.io/v1
 metadata:
   name: studio-devstar-ingress
   namespace: studio-devstar-cn-ns
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
 spec:
   ingressClassName: nginx
   rules:
@@ -16,6 +18,15 @@ spec:
         pathType: Prefix
         backend:
           service:
-            name: studio-devstar-server
+            name: backend-service
             port:
               number: 80
+  tls:
+  # 注意：配置下列 TLS 证书时候，需要从证书签发目录执行下列命令：
+  #  1. 删除过期 SSL 证书：
+  #     $  kubectl delete secret -n studio-devstar-cn-ns studio-devstar-cn-ssl-secret
+  #  2. 从腾讯云控制台新签发的 TLS 证书创建 TLS 密钥：
+  #     $ kubectl create secret tls -n studio-devstar-cn-ns studio-devstar-cn-ssl-secret --cert=studio.devstar.cn_bundle.crt --key=studio.devstar.cn.key
+  - hosts:
+    - studio.devstar.cn
+    secretName: studio-devstar-cn-ssl-secret