From 96236c6baf3ae7cfb8f3dec1823f26374b7d8071 Mon Sep 17 00:00:00 2001
From: "pierre.geeraert" <pierre.geeraert@betfred.com>
Date: Tue, 13 Oct 2026 14:48:25 +0100
Subject: [PATCH] two ingress instead

---
 core/services.tf | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/core/services.tf b/core/services.tf
index 5f898d5..fc63908 100644
--- a/core/services.tf
+++ b/core/services.tf
@@ -14,7 +14,7 @@ resource "kubernetes_ingress_v1" "automatic_ingress" {
     ingress_class_name = "traefik"
     # Dynamic TLS configuration for cert-manager
     tls {
-      hosts       = [join(".", [coalesce(each.value.domain_name, each.key), "geeraert.eu"]),join(".", [coalesce(each.value.domain_name, each.key), "tryton.geeraert.eu"])]
+      hosts       = [join(".", [coalesce(each.value.domain_name, each.key), "geeraert.eu"])]
       secret_name = "${each.key}-tls-secret" # cert-manager will create and manage this secret automatically
     }
 
@@ -34,6 +34,28 @@ resource "kubernetes_ingress_v1" "automatic_ingress" {
         }
       }
     }
+  }
+}
+resource "kubernetes_ingress_v1" "automatic_ingress_tryton" {
+  for_each = { for key, value in var.kubernetes : key => value if value.service_port != null && value.enabled == true && value.docker != true && value.exposed == true }
+  metadata {
+    name      = "${each.key}-ingress"
+    namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
+
+    annotations = {
+      "cert-manager.io/cluster-issuer"                   = "letsencrypt-prod"
+      "traefik.ingress.kubernetes.io/router.entrypoints" = "websecure"
+    }
+  }
+
+  spec {
+    ingress_class_name = "traefik"
+    # Dynamic TLS configuration for cert-manager
+    tls {
+      hosts       = [join(".", [coalesce(each.value.domain_name, each.key), "tryton.geeraert.eu"])]
+      secret_name = "${each.key}-tryton-tls-secret" # cert-manager will create and manage this secret automatically
+    }
+
     rule {
       host = join(".", [coalesce(each.value.domain_name, each.key), "tryton.geeraert.eu"])
       http {