---
apiVersion: codemowers.cloud/v1beta1
kind: OIDCMiddlewareClient
metadata:
  name: sso
spec:
  displayName: Cameras
  uri: 'https://cam.k-space.ee/tiled'
  allowedGroups:
    - k-space:floor
    - k-space:friends
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: camtiler
  annotations:
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.middlewares: camtiler-sso@kubernetescrd
    traefik.ingress.kubernetes.io/router.tls: "true"
    external-dns.alpha.kubernetes.io/target: traefik.k-space.ee
    external-dns.alpha.kubernetes.io/hostname: cams.k-space.ee,cam.k-space.ee
spec:
  rules:
    - host: cam.k-space.ee
      http:
        paths:
          - pathType: Prefix
            path: "/tiled"
            backend:
              service:
                name: camera-tiler
                port:
                  number: 5001
          - pathType: Prefix
            path: "/m"
            backend:
              service:
                name: camera-tiler
                port:
                  number: 5001
          - pathType: Prefix
            path: "/events"
            backend:
              service:
                name: logmower-eventsource
                port:
                  number: 3002
          - pathType: Prefix
            path: "/"
            backend:
              service:
                name: logmower-frontend
                port:
                  number: 8080
  tls:
    - hosts:
        - "*.k-space.ee"
---
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: cams-redirect
spec:
  redirectRegex:
    regex: ^https://cams.k-space.ee/(.*)$
    replacement: https://cam.k-space.ee/$1
    permanent: true
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: cams
spec:
  entryPoints:
    - websecure
  routes:
  - match: Host(`cams.k-space.ee`)
    kind: Rule
    middlewares:
      - name: cams-redirect
    services:
      - kind: TraefikService
        name: api@internal