# HTTPProxy for Kibana + OAuth2-proxy
# Routes /oauth2/* to oauth2-proxy (auth endpoints)
# Routes all other paths to Kibana
apiVersion: projectcontour.io/v1
kind: HTTPProxy
metadata:
  name: kibana-prd-observability-oauth
  namespace: eck-observability-prd
  annotations:
    projectcontour.io/ingress.class: contour-internal
spec:
  ingressClassName: contour-internal
  virtualhost:
    fqdn: kibana-prd-observability.prd.meesho.int

  routes:
    # Route 1: OAuth2-proxy auth endpoints (/oauth2/auth, /oauth2/start, /oauth2/callback)
    - conditions:
        - prefix: /oauth2
      services:
        - name: oauth2-proxy-kibana
          port: 4180
      timeoutPolicy:
        response: "30s"
        idle: "30s"

    # Route 2: All other routes go to Kibana
    - conditions:
        - prefix: /
      services:
        - name: kibana-eck-observability-prd-kb-http
          port: 5601
      timeoutPolicy:
        response: "300s"
        idle: "300s"