# Routes on the traefik-internal class, like the rest of *.k8s.stinnesbeck.com. No tls section
# and no per-host Certificate: TLS is configured on Traefik's websecure entrypoint, which serves
# the default certificate.
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: mg4-server
  namespace: mg4
  annotations:
    kubernetes.io/ingress.class: traefik-internal
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`car.k8s.stinnesbeck.com`)
      services:
        - kind: Service
          name: mg4-server
          namespace: mg4
          port: 80
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: grafana
  namespace: mg4
  annotations:
    kubernetes.io/ingress.class: traefik-internal
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      # CHECK: placeholder host. It must be covered by Traefik's default certificate.
      match: Host(`car-grafana.k8s.stinnesbeck.com`)
      services:
        - kind: Service
          name: grafana
          namespace: mg4
          port: 80