kube/passmower/application-extras.yaml

---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: auth2-redirect
spec:
  redirectRegex:
    regex: ^https://auth2.k-space.ee/(.*)
    replacement: https://auth.k-space.ee/${1}
    permanent: false
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: auth2
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`auth2.k-space.ee`)
      kind: Rule
      middlewares:
        - name: auth2-redirect
      services:
        - kind: TraefikService
          name: api@internal