deployments/k3s-INFRA/DEV/traefik-rules/authserv/IngressRoute.yaml

apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: oauth2-https
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`auth-dev.hobbystocks.cn`)
      middlewares:
        - name: authserv-cors-header
      services:
        - name: authserv
          port: 80
    - kind: Rule
      match: Host(`auth-dev.hobbystocks.cn`) && Path(`/api/external/user`)
      middlewares:
        - name: authserv-token-validation
        # - name: coresvc-jwt-token-v2.2-verify
      services:
        - name: authserv
          port: 80
    - kind: Rule
      match: Host(`m2.hobbystocks.cn`) && Path(`/authserv/api/external/user`)
      middlewares:
        - name: authserv-token-validation
        - name: authserv-strip
      services:
        - name: authserv
          port: 80
    - kind: Rule
      match: Host(`auth-dev.hobbystocks.cn`) && Path(`/api/external/util/sysdict`,`/api/external/merchant/totp`,`/api/external/a2/password`,`/api/external/a2/verify`)
      middlewares:
        - name: authserv-cors-header
        - name: authserv-partnertoken-validation
      services:
        - name: authserv
          port: 80
  tls:
    secretName: auth-dev.hobbystocks.cn

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: oauth2-m2dev-https
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`m2.hobbystocks.cn`) && Path(`/oauth2/token`)
      services:
        - name: authserv
          port: 80
  tls:
    secretName: m2-dev.hobbystocks.cn