---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ .Chart.Name }}
  labels:
    app: {{ .Chart.Name }}
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
    nginx.ingress.kubernetes.io/proxy-body-size: 1024m
    nginx.ingress.kubernetes.io/proxy-connect-timeout: "10000"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "10000"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "10000"
    nginx.ingress.kubernetes.io/upstream-keepalive-timeout: "10000"
spec:
  ingressClassName: {{ dig .Values.werf.env .Values.ingress.className._default .Values.ingress.className | quote }}
  tls:
    - hosts:
        - {{ dig .Values.werf.env .Values.ingress.host._default .Values.ingress.host | quote }}
      secretName: {{ dig .Values.werf.env .Values.ingress.secretName._default .Values.ingress.secretName | quote }}
  rules:
    - host: {{ dig .Values.werf.env .Values.ingress.host._default .Values.ingress.host | quote }}
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: {{ .Chart.Name }}
                port:
                  name: http
---
apiVersion: v1
kind: Secret
metadata:
  name: {{ dig .Values.werf.env .Values.ingress.secretName._default .Values.ingress.secretName }}
  annotations:
    werf.io/sensitive: "true"
type: kubernetes.io/tls
stringData:
  tls.crt: |
    {{- werf_secret_file (printf "%s/%s" .Values.werf.env "tls.crt") | nindent 4 }}
  tls.key: |
    {{- werf_secret_file (printf "%s/%s" .Values.werf.env "tls.key") | nindent 4 }}