apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: istio-config
  namespace: default
spec:
  interval: 5m
  timeout: 10m
  values:
    global:
      env: contour
    environments:
      contour:
        certManager:
          certificates:
            minio-tls:
              dnsNames:
                - minio.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            zitadel-tls:
              dnsNames:
                - zitadel.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            dashboard-tls:
              dnsNames:
                - dashboard.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            rabbitmq-tls:
              dnsNames:
                - rabbitmq.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            keycloak-tls:
              dnsNames:
                - keycloak.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            camunda-keycloak-tls:
              dnsNames:
                - camunda-keycloak.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            camunda-identity-tls:
              dnsNames:
                - camunda-identity.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            camunda-operate-tls:
              dnsNames:
                - camunda-operate.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            camunda-tasklist-tls:
              dnsNames:
                - camunda-tasklist.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
            camunda-optimize-tls:
              dnsNames:
                - camunda-optimize.contour.infra.sarex.tech
              issuerRef:
                name: letsencrypt-issuer-istio
                kind: ClusterIssuer
        istio:
          gateways:
            minio:
              name: minio-gateway
              namespace: gateway
              servers:
                - hosts:
                    - minio.contour.infra.sarex.tech
                  tls:
                    credentialName: minio-tls
                - hosts:
                    - minio.contour.infra.sarex.tech
            zitadel:
              name: zitadel-gateway
              namespace: gateway
              servers:
                - hosts:
                    - zitadel.contour.infra.sarex.tech
                  tls:
                    credentialName: zitadel-tls
                - hosts:
                    - zitadel.contour.infra.sarex.tech
            dashboard:
              name: dashboard-gateway
              namespace: gateway
              servers:
                - hosts:
                    - dashboard.contour.infra.sarex.tech
                  tls:
                    credentialName: dashboard-tls
                - hosts:
                    - dashboard.contour.infra.sarex.tech
            rabbitmq:
              name: rabbitmq-gateway
              namespace: gateway
              servers:
                - hosts:
                    - rabbitmq.contour.infra.sarex.tech
                  tls:
                    credentialName: rabbitmq-tls
                - hosts:
                    - rabbitmq.contour.infra.sarex.tech
            keycloak:
              name: keycloak-gateway
              namespace: gateway
              servers:
                - hosts:
                    - keycloak.contour.infra.sarex.tech
                  tls:
                    credentialName: keycloak-tls
                - hosts:
                    - keycloak.contour.infra.sarex.tech
            camunda:
              name: camunda-gateway
              namespace: gateway
              servers:
                - hosts:
                    - camunda-keycloak.contour.infra.sarex.tech
                  tls:
                    credentialName: camunda-keycloak-tls
                - hosts:
                    - camunda-keycloak.contour.infra.sarex.tech
                - hosts:
                    - camunda-identity.contour.infra.sarex.tech
                  tls:
                    credentialName: camunda-identity-tls
                - hosts:
                    - camunda-identity.contour.infra.sarex.tech
                - hosts:
                    - camunda-operate.contour.infra.sarex.tech
                  tls:
                    credentialName: camunda-operate-tls
                - hosts:
                    - camunda-operate.contour.infra.sarex.tech
                - hosts:
                    - camunda-tasklist.contour.infra.sarex.tech
                  tls:
                    credentialName: camunda-tasklist-tls
                - hosts:
                    - camunda-tasklist.contour.infra.sarex.tech
                - hosts:
                    - camunda-optimize.contour.infra.sarex.tech
                  tls:
                    credentialName: camunda-optimize-tls
                - hosts:
                    - camunda-optimize.contour.infra.sarex.tech
          virtualServices:
            minio:
              name: minio-virt-service
              namespace: gateway
              hosts:
                - minio.contour.infra.sarex.tech
              gateways:
                - gateway/minio-gateway
              routes:
                - path:
                    prefix: /
                  service: minio-minio-contour-console.minio.svc.cluster.local
                  port: 9001
            zitadel:
              name: zitadel-virt-service
              namespace: gateway
              hosts:
                - zitadel.contour.infra.sarex.tech
              gateways:
                - gateway/zitadel-gateway
              routes:
                - path:
                    prefix: /
                  service: zitadel-idp-contour.zitadel.svc.cluster.local
                  port: 8080
            dashboard:
              name: dashboard-virt-service
              namespace: gateway
              hosts:
                - dashboard.contour.infra.sarex.tech
              gateways:
                - gateway/dashboard-gateway
              routes:
                - path:
                    prefix: /
                  service: dashboard-kong-proxy.kubernetes-dashboard.svc.cluster.local
                  port: 80
            rabbitmq:
              name: rabbitmq-virt-service
              namespace: gateway
              hosts:
                - rabbitmq.contour.infra.sarex.tech
              gateways:
                - gateway/rabbitmq-gateway
              routes:
                - path:
                    prefix: /
                  service: rabbitmq.rabbitmq.svc.cluster.local
                  port: 15672
            keycloak:
              name: keycloak-virt-service
              namespace: gateway
              hosts:
                - keycloak.contour.infra.sarex.tech
              gateways:
                - gateway/keycloak-gateway
              routes:
                - path:
                    prefix: /
                  service: keycloak-keycloak-contour.keycloak.svc.cluster.local
                  port: 80
            camunda-keycloak:
              name: camunda-keycloak-virt-service
              namespace: gateway
              hosts:
                - camunda-keycloak.contour.infra.sarex.tech
              gateways:
                - gateway/camunda-gateway
              routes:
                - path:
                    prefix: /
                  service: camunda-keycloak.camunda.svc.cluster.local
                  port: 80
            camunda-identity:
              name: camunda-identity-virt-service
              namespace: gateway
              hosts:
                - camunda-identity.contour.infra.sarex.tech
              gateways:
                - gateway/camunda-gateway
              routes:
                - path:
                    prefix: /
                  service: camunda-identity.camunda.svc.cluster.local
                  port: 80
            camunda-operate:
              name: camunda-operate-virt-service
              namespace: gateway
              hosts:
                - camunda-operate.contour.infra.sarex.tech
              gateways:
                - gateway/camunda-gateway
              routes:
                - path:
                    prefix: /
                  service: camunda-operate.camunda.svc.cluster.local
                  port: 80
            camunda-tasklist:
              name: camunda-tasklist-virt-service
              namespace: gateway
              hosts:
                - camunda-tasklist.contour.infra.sarex.tech
              gateways:
                - gateway/camunda-gateway
              routes:
                - path:
                    prefix: /
                  service: camunda-tasklist.camunda.svc.cluster.local
                  port: 80
            camunda-optimize:
              name: camunda-optimize-virt-service
              namespace: gateway
              hosts:
                - camunda-optimize.contour.infra.sarex.tech
              gateways:
                - gateway/camunda-gateway
              routes:
                - path:
                    prefix: /
                  service: camunda-optimize.camunda.svc.cluster.local
                  port: 80