two ingress instead

2026-10-13 14:48:25 +01:00
parent bd2d151ebd
commit 96236c6baf
1 changed files with 23 additions and 1 deletions
@@ -14,7 +14,7 @@ resource "kubernetes_ingress_v1" "automatic_ingress" {
    ingress_class_name = "traefik"
    # Dynamic TLS configuration for cert-manager
    tls {
-      hosts       = [join(".", [coalesce(each.value.domain_name, each.key), "geeraert.eu"]),join(".", [coalesce(each.value.domain_name, each.key), "tryton.geeraert.eu"])]
+      hosts       = [join(".", [coalesce(each.value.domain_name, each.key), "geeraert.eu"])]
      secret_name = "${each.key}-tls-secret" # cert-manager will create and manage this secret automatically
    }

@@ -34,6 +34,28 @@ resource "kubernetes_ingress_v1" "automatic_ingress" {
        }
      }
    }
+  }
+}
+resource "kubernetes_ingress_v1" "automatic_ingress_tryton" {
+  for_each = { for key, value in var.kubernetes : key => value if value.service_port != null && value.enabled == true && value.docker != true && value.exposed == true }
+  metadata {
+    name      = "${each.key}-ingress"
+    namespace = coalesce(each.value.namespace, each.value.connected_namespace, each.key)
+
+    annotations = {
+      "cert-manager.io/cluster-issuer"                   = "letsencrypt-prod"
+      "traefik.ingress.kubernetes.io/router.entrypoints" = "websecure"
+    }
+  }
+
+  spec {
+    ingress_class_name = "traefik"
+    # Dynamic TLS configuration for cert-manager
+    tls {
+      hosts       = [join(".", [coalesce(each.value.domain_name, each.key), "tryton.geeraert.eu"])]
+      secret_name = "${each.key}-tryton-tls-secret" # cert-manager will create and manage this secret automatically
+    }
+
    rule {
      host = join(".", [coalesce(each.value.domain_name, each.key), "tryton.geeraert.eu"])
      http {