{{- $fullName := include "authentik.fullname" . -}}
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: {{ $fullName }}
  labels:
    app.kubernetes.io/name: {{ include "authentik.name" . }}
    helm.sh/chart: {{ include "authentik.chart" . }}
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/managed-by: {{ .Release.Service }}
{{- with .Values.ingress.annotations }}
  annotations:
{{ toYaml . | indent 4 }}
{{- end }}
spec:
{{- if .Values.ingress.tls }}
  tls:
  {{- range .Values.ingress.tls }}
    - hosts:
      {{- range .hosts }}
        - {{ . | quote }}
      {{- end }}
      secretName: {{ .secretName }}
  {{- end }}
{{- end }}
  rules:
  {{- range .Values.ingress.hosts }}
    - host: {{ . | quote }}
      http:
        paths:
          - path: /
            backend:
              serviceName: {{ $fullName }}-web
              servicePort: http
          - path: /static/
            backend:
              serviceName: {{ $fullName }}-static
              servicePort: http
          - path: /media/
            backend:
              serviceName: {{ $fullName }}-static
              servicePort: http
          - path: /robots.txt
            backend:
              serviceName: {{ $fullName }}-static
              servicePort: http
          - path: /favicon.ico
            backend:
              serviceName: {{ $fullName }}-static
              servicePort: http
  {{- end }}