apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: ahx-oidc.https
  namespace: ahxpm
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: >-
        Host(`dev.ahxpm.com`) && PathPrefix(`/ahx-oidc`)
      middlewares:
        - name: ahx-oidc-strip
        - name: ahx-oidc.cors-header
      priority: 200
      services:
        - name: ahx-oidc
          port: 80
    - kind: Rule
      match: Host(`dev.ahxpm.com`) && Path(`/ahx-oidc/api/external/authn/token/a2`)
      services:
        - name: ahx-oidc
          port: 80
    - kind: Rule
      match: Host(`dev.ahxpm.com`) && Path(`/ahx-oidc/api/external/ldap/password`)
      middlewares:
        - name: ahx-oidc.authn-app
        - name: ahx-oidc-strip
        - name: ahx-oidc.cors-header
      services:
        - name: ahx-oidc
          port: 80
    - kind: Rule
      match: Host(`dev.ahxpm.com`) && Path(`/ahx-oidc/oauth2/token`)
      middlewares:
        - name: ahx-oidc-strip
        - name: ahx-oidc.cors-header
      services:
        - name: ahx-oidc
          port: 80
    - kind: Rule
      match: Host(`dev.ahxpm.com`) && Path(`/ahx-oidc/api/internal/authz/permission`)
      middlewares:
        - name: ahx-oidc-strip
        - name: ahx-oidc.cors-header
      services:
        - name: ahx-oidc
          port: 80
    - kind: Rule
      match: Host(`dev.ahxpm.com`) && Path(`/ahx-oidc/api/totp/permission/send`)
      middlewares:
        - name: ahx-oidc-strip
        - name: ahx-oidc.cors-header
      services:
        - name: ahx-oidc
          port: 80
  tls:
    secretName: dev.ahxpm.com