apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: istio-config
  namespace: default
spec:
  interval: 5m
  timeout: 10m
  dependsOn:
    - name: istio-base
      namespace: istio-system
    - name: istiod
      namespace: istio-system
    - name: cert-manager
      namespace: cert-manager
  values:
    global:
      env: vk-infra
    environments:
      vk-infra:
        certManager:
          certificates:
            idp-tls:
              dnsNames:
                - iam.sarex.io
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
              spec:
                duration: 2160h0m0s
                renewBefore: 360h0m0s
                privateKey:
                  rotationPolicy: Always
        istio:
          gateways:
            idp:
              name: idp-gateway
              namespace: istio-system
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - iam.sarex.io
                  tls:
                    credentialName: idp-tls
                    mode: SIMPLE
          virtualServices:
            idp-virt-service:
              namespace: istio-system
              hosts:
                - iam.sarex.io
              gateways:
                - istio-system/idp-gateway
              routes:
                - path:
                    prefix: /
                  service: idp.zitadel.svc.cluster.local
                  port: 8080