---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ .Chart.Name }}
  annotations:
    nginx.ingress.kubernetes.io/affinity: cookie
    nginx.ingress.kubernetes.io/proxy-buffer-size: "8k"
    nginx.ingress.kubernetes.io/session-cookie-expires: "86400"
    nginx.ingress.kubernetes.io/session-cookie-max-age: "86400"
    nginx.ingress.kubernetes.io/session-cookie-name: keycloak-cookie
    nginx.ingress.kubernetes.io/use-forwarded-headers: "true"
spec:
  ingressClassName: {{ dig .Values.werf.env .Values.keycloak.ingress.classNames._default .Values.keycloak.ingress.classNames | quote }}
  tls:
  - hosts:
    - {{ dig .Values.werf.env .Values.keycloak.ingress.domain._default .Values.keycloak.ingress.domain | quote }}
    secretName: {{ dig .Values.werf.env .Values.keycloak.ingress.secretName._default .Values.keycloak.ingress.secretName | quote }}
  rules:
  - host: {{ dig .Values.werf.env .Values.keycloak.ingress.domain._default .Values.keycloak.ingress.domain | quote }}
    http:
      paths:
      - backend:
          service:
            name: {{ .Chart.Name }}
            port:
              number: 8080
        path: /
        pathType: ImplementationSpecific
---
apiVersion: v1
kind: Secret
metadata:
  name: {{ dig .Values.werf.env .Values.keycloak.ingress.secretName._default .Values.keycloak.ingress.secretName }}
  annotations:
    "werf.io/sensitive": "true"
type: kubernetes.io/tls
stringData:
  tls.crt: |
    {{- werf_secret_file (printf "%s/%s" .Values.werf.env "tls.crt") | nindent 4 }}
  tls.key: |
    {{- werf_secret_file (printf "%s/%s" .Values.werf.env "tls.key") | nindent 4 }}