---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: linkerd-web-ingress
  namespace: linkerd-viz
  annotations:
    traefik.ingress.kubernetes.io/router.middlewares: "networking-internal-auth@kubernetescrd"
    traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
    ingress.kubernetes.io/custom-request-headers: l5d-dst-override:web.linkerd-viz.svc.cluster.local:8084
    kubernetes.io/ingress.class: "traefik"
    hajimari.io/enable: "true"
    hajimari.io/icon: chip
    hajimari.io/appName: Linkerd
spec:
  ingressClassName: traefik
  tls:
    - hosts:
        - "linkerd.${SECRET_DOMAIN}"
      secretName: linkerd-viz-tls # checkov:skip=CKV_SECRET_6 secret ref
  rules:
    - host: "linkerd.${SECRET_DOMAIN}"
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: web
                port:
                  number: 8084
