apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: grafana-prod
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`grafana.forust.xyz`)
      kind: Rule
      services:
        - name: prometheus-stack-grafana
          port: 80
  tls:
    secretName: grafana-prod-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: grafana-local
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`grafana.workstation.internal`) || Host(`grafana.gigaforust.internal`)
      kind: Rule
      services:
        - name: prometheus-stack-grafana
          port: 80
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: prometheus-local
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`prom.workstation.internal`) || Host(`prom.gigaforust.internal`)
      kind: Rule
      services:
        - name: prometheus-stack-kube-prom-prometheus
          port: 9090
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: alertmanager-local
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`am.workstation.internal`) || Host(`am.gigaforust.internal`)
      kind: Rule
      services:
        - name: prometheus-stack-kube-prom-alertmanager
          port: 9093
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: loki-local
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`loki.workstation.internal`) || Host(`loki.gigaforust.internal`)
      kind: Rule
      services:
        - name: loki-gateway
          port: 80
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: alloy-local
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`alloy.workstation.internal`) || Host(`alloy.gigaforust.internal`)
      kind: Rule
      services:
        - name: alloy
          port: 12345
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: victoria-local
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`victoria.workstation.internal`) || Host(`victoria.gigaforust.internal`)
      kind: Rule
      services:
        - name: victoria-metrics
          port: 8428
  tls:
    secretName: internal-wildcard-tls
---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: vmalert-local
  namespace: prometheus
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`vmalert.workstation.internal`) || Host(`vmalert.gigaforust.internal`)
      kind: Rule
      services:
        - name: vmalert
          port: 8880
  tls:
    secretName: internal-wildcard-tls