{{- if .Values.traefik.enabled -}}
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: {{ include "rdp-web-gateway.fullname" . }}
  labels:
    {{- include "rdp-web-gateway.labels" . | nindent 4 }}
  {{- with .Values.traefik.annotations }}
  annotations:
    {{- toYaml . | nindent 4 }}
  {{- end }}
spec:
  entryPoints:
    {{- toYaml .Values.traefik.entryPoints | nindent 4 }}
  routes:
  - match: Host(`{{ .Values.traefik.host }}`)
    kind: Rule
    services:
    - name: {{ include "rdp-web-gateway.fullname" . }}
      port: {{ .Values.service.port }}
    {{- if .Values.traefik.middlewares }}
    middlewares:
      {{- toYaml .Values.traefik.middlewares | nindent 6 }}
    {{- end }}
  {{- if .Values.traefik.tls.enabled }}
  tls:
    {{- if .Values.traefik.tls.certResolver }}
    certResolver: {{ .Values.traefik.tls.certResolver }}
    {{- end }}
    {{- if .Values.traefik.tls.secretName }}
    secretName: {{ .Values.traefik.tls.secretName }}
    {{- end }}
    {{- if .Values.traefik.tls.domains }}
    domains:
      {{- range .Values.traefik.tls.domains }}
      - main: {{ .main }}
        {{- if .sans }}
        sans:
          {{- toYaml .sans | nindent 10 }}
        {{- end }}
      {{- end }}
    {{- end }}
  {{- end }}
{{- end }}