---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ .Values.system }}-ingress
  labels:
    app: {{ .Values.system }}
    tenant: {{ .Values.system }}
  annotations:
    cert-manager.io/cluster-issuer: lets-encrypt-prod
    nginx.ingress.kubernetes.io/rewrite-target: /

spec:
  ingressClassName: {{ .Values.components.app.ingress.className }}
  tls:
    - hosts:
      - "{{ .Values.components.app.ingress.domain }}"
      secretName: {{ .Values.system }}-ingress-tls
  rules:
    - host: "{{ .Values.components.app.ingress.domain }}"
      http:
        paths:
          - path: {{ .Values.components.app.ingress.path }}
            pathType: Prefix
            backend:
              service:
                name: {{ .Values.system }}-service
                port:
                  number: {{ .Values.components.app.ingress.port }}