apiVersion: v1
kind: ConfigMap
metadata:
  name: prole-svc-kong-config
  namespace: knoe-system
  annotations:
    argocd.argoproj.io/sync-wave: "0"
data:
  kong.yml: |
    _format_version: "3.0"
    _transform: true

    services:
      # ── svc.prole.org — internal tools ───────────────────────────────────────
      - name: prole-service
        url: http://prole-svc.knoe-system.svc.cluster.local:8080
        routes:
          - name: prole-k3s-kubeconfig
            hosts:
              - svc.prole.org
            paths:
              - /k3s/kube_config.sh
            strip_path: false

      - name: db-manager
        url: http://knoe-db-manager.knoe-db.svc.cluster.local:80
        routes:
          - name: backup-route
            hosts:
              - svc.prole.org
            paths:
              - /backup
            strip_path: false

      - name: grafana
        url: http://kps-grafana.monitoring.svc.cluster.local:80
        routes:
          - name: grafana-root
            hosts:
              - svc.prole.org
            paths:
              - /
            strip_path: false

      # ── api.prole.org / db.prole.org / supabase.prole.org → Supabase Kong ──
      # Supabase Kong handles internal routing: /auth/, /rest/, /storage/,
      # /realtime/, /functions/, and / (Studio UI).
      - name: supabase-kong
        url: http://supabase-kong.supabase.svc.cluster.local:8000
        routes:
          - name: supabase-api
            hosts:
              - api.prole.org
            paths:
              - /
            strip_path: false
            preserve_host: true
          - name: supabase-db
            hosts:
              - db.prole.org
            paths:
              - /
            strip_path: false
            preserve_host: true
          - name: supabase-studio
            hosts:
              - supabase.prole.org
            paths:
              - /
            strip_path: false
            preserve_host: true

      # ── git.prole.org → GitLab (Workhorse + Puma on :8080) ──────────────────
      # Routes HTTP/HTTPS git traffic through prole-svc-kong to the GitLab
      # webservice.  GitLab's own nginx ingress is blocked by hostPort conflicts
      # with traefik svclb; this bypasses it cleanly.
      # SSH git access (port 22) is handled separately by gitlab-gitlab-shell.
      - name: gitlab-web
        url: http://gitlab-webservice-default.gitlab.svc.cluster.local:8080
        routes:
          - name: gitlab-root
            hosts:
              - git.prole.org
            paths:
              - /
            strip_path: false
            preserve_host: true