S1a

The ground exists. DNS, load balancer, ingress and TLS are working.

There is no application here yet. That is S2.