apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: longhorn-ui
  namespace: traefik
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`longhorn.solidish.dev`) && PathPrefix(`/outpost.goauthentik.io/`)
      kind: Rule
      services:
        - name: ak-outpost-traefik-forwardauth
          namespace: authentik
          port: 9000
    - match: Host(`longhorn.solidish.dev`)
      kind: Rule
      middlewares:
        - name: authentik-forwardauth
          namespace: traefik
      services:
        - name: longhorn-frontend
          namespace: longhorn-system
          port: 80
  tls:
    secretName: longhorn-solidish-dev-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: hubble-ui
  namespace: traefik
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`hubble.solidish.dev`) && PathPrefix(`/outpost.goauthentik.io/`)
      kind: Rule
      services:
        - name: ak-outpost-traefik-forwardauth
          namespace: authentik
          port: 9000
    - match: Host(`hubble.solidish.dev`)
      kind: Rule
      middlewares:
        - name: authentik-forwardauth
          namespace: traefik
      services:
        - name: hubble-ui
          namespace: kube-system
          port: 80
  tls:
    secretName: hubble-solidish-dev-tls