apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: {{ include "instance.fullname" . }}
  labels:
    {{- include "instance.labels" . | nindent 4 }}
spec:
  entryPoints:
    - {{ .Values.ingress.entryPoint }}
  routes:
    - match: Host(`{{ .Values.instance.domain }}`)
      kind: Rule
      services:
        - name: {{ include "instance.fullname" . }}-odoo
          port: 8069
  tls:
    # Shared wildcard cert for *.tenants.odoosky.org. The Secret is
    # provisioned ONCE per cluster (see infrastructure/cluster/) and
    # mirrored into the chart's release namespace by the cluster
    # operator. Instances do NOT issue their own certs.
    secretName: {{ .Values.ingress.tlsSecret }}