# ------------------------------------------------------------------------------
# HTTPRoute — Firecrawl via Cilium Gateway
# Both primary (spaceship-earth) and secondary (firecrawl) DNS names
# ------------------------------------------------------------------------------
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: spaceship-earth-tls
  namespace: {{ .Values.namespace.name }}
spec:
  secretName: spaceship-earth-tls
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  dnsNames:
    - spaceship-earth.local.mk-labs.cloud
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: firecrawl-tls
  namespace: {{ .Values.namespace.name }}
spec:
  secretName: firecrawl-tls
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  dnsNames:
    - firecrawl.local.mk-labs.cloud
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: spaceship-earth
  namespace: {{ .Values.namespace.name }}
  annotations:
    external-dns.alpha.kubernetes.io/hostname: spaceship-earth.local.mk-labs.cloud
    external-dns.alpha.kubernetes.io/target: "10.1.71.90"
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: fastpass-gateway
      namespace: gateway
      sectionName: https
  hostnames:
    - spaceship-earth.local.mk-labs.cloud
  rules:
    - matches:
        - path:
            type: PathPrefix
            value: /
      backendRefs:
        - group: ""
          kind: Service
          name: {{ include "firecrawl.fullname" . }}-api
          port: {{ .Values.api.service.port }}
          weight: 1
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: firecrawl
  namespace: {{ .Values.namespace.name }}
  annotations:
    external-dns.alpha.kubernetes.io/hostname: firecrawl.local.mk-labs.cloud
    external-dns.alpha.kubernetes.io/target: "10.1.71.90"
spec:
  parentRefs:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: fastpass-gateway
      namespace: gateway
      sectionName: https
  hostnames:
    - firecrawl.local.mk-labs.cloud
  rules:
    - matches:
        - path:
            type: PathPrefix
            value: /
      backendRefs:
        - group: ""
          kind: Service
          name: {{ include "firecrawl.fullname" . }}-api
          port: {{ .Values.api.service.port }}
          weight: 1