apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: istio-config
  namespace: default
spec:
  install:
    disableWait: true
  upgrade:
    disableWait: true
  values:
    global:
      env: brusnika-stage
    environments:
      brusnika-stage:
        namespaces: []
        certManager:
          clusterIssuers: {}
          certificates:
            camunda-identity-tls:
              namespace: ingress-nginx
              dnsNames:
                - identity.camunda.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            keycloak.camunda.test.sarex.brusnika.tech-tls:
              namespace: ingress-nginx
              dnsNames:
                - keycloak.camunda.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            camunda-platform-operate-tls:
              namespace: ingress-nginx
              dnsNames:
                - operate.camunda.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            camunda-platform-tasklist-tls:
              namespace: ingress-nginx
              dnsNames:
                - tasklist.camunda.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            camunda-optimize-tls:
              namespace: ingress-nginx
              dnsNames:
                - optimize.camunda.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            tls-public-link:
              namespace: ingress-nginx
              dnsNames:
                - document-link.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            tls-stamp-verification:
              namespace: ingress-nginx
              dnsNames:
                - stamp-verification.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            gitea-stage-tls:
              namespace: ingress-nginx
              dnsNames:
                - gitea.stage.brusnika.sarex.lonsdaleites.ru
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            another-nginx-secret:
              namespace: ingress-nginx
              dnsNames:
                - test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            nginx-secret:
              namespace: ingress-nginx
              dnsNames:
                - cde.brusnika.lonsdaleites.ru
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            jupyter-cert-secret:
              namespace: ingress-nginx
              dnsNames:
                - jupyter.brusnika.lonsdaleites.ru
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            dashboard-cert-secret:
              namespace: ingress-nginx
              dnsNames:
                - dashboard.brusnika.lonsdaleites.ru
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            minio-console-cert-secret:
              namespace: ingress-nginx
              dnsNames:
                - minio.brusnika.lonsdaleites.ru
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            superset-tls-secret:
              namespace: ingress-nginx
              dnsNames:
                - superset.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            vault-stage-tls:
              namespace: ingress-nginx
              dnsNames:
                - vault.stage.brusnika.sarex.lonsdaleites.ru
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            zitadel-tls:
              namespace: ingress-nginx
              dnsNames:
                - zitadel.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            grafana-tls:
              namespace: ingress-nginx
              dnsNames:
                - grafana.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            openobserve-tls:
              namespace: ingress-nginx
              dnsNames:
                - openobserve.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
            vmalert-tls:
              namespace: ingress-nginx
              dnsNames:
                - vmalert.test.sarex.brusnika.tech
              issuerRef:
                name: letsencrypt
                kind: ClusterIssuer
        istio:
          envoyFilters: {}
          authorizationPolicies: {}
          requestAuthentications: {}
          gateways:
            camunda-identity:
              name: camunda-identity-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - identity.camunda.test.sarex.brusnika.tech
                  tls:
                    credentialName: camunda-identity-tls
            camunda-keycloak:
              name: camunda-keycloak-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - keycloak.camunda.test.sarex.brusnika.tech
                  tls:
                    credentialName: keycloak.camunda.test.sarex.brusnika.tech-tls
            camunda-operate:
              name: camunda-operate-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - operate.camunda.test.sarex.brusnika.tech
                  tls:
                    credentialName: camunda-platform-operate-tls
            camunda-optimize:
              name: camunda-optimize-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - optimize.camunda.test.sarex.brusnika.tech
                  tls:
                    credentialName: camunda-optimize-tls
            camunda-tasklist:
              name: camunda-tasklist-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - tasklist.camunda.test.sarex.brusnika.tech
                  tls:
                    credentialName: camunda-platform-tasklist-tls
            document-link:
              name: document-link-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - document-link.test.sarex.brusnika.tech
                  tls:
                    credentialName: tls-public-link
            stamp-verification:
              name: stamp-verification-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - stamp-verification.test.sarex.brusnika.tech
                  tls:
                    credentialName: tls-stamp-verification
            gitea:
              name: gitea-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - gitea.stage.brusnika.sarex.lonsdaleites.ru
                  tls:
                    credentialName: gitea-stage-tls
            global-main:
              name: main-gateway
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - test.sarex.brusnika.tech
                  tls:
                    credentialName: another-nginx-secret
            global-cde:
              name: global-cde-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - cde.brusnika.lonsdaleites.ru
                  tls:
                    credentialName: nginx-secret
            jupyter:
              name: jupyter-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - jupyter.brusnika.lonsdaleites.ru
                  tls:
                    credentialName: jupyter-cert-secret
            dashboard:
              name: dashboard-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - dashboard.brusnika.lonsdaleites.ru
                  tls:
                    credentialName: dashboard-cert-secret
            minio:
              name: minio-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - minio.brusnika.lonsdaleites.ru
                  tls:
                    credentialName: minio-console-cert-secret
            superset:
              name: superset-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - superset.test.sarex.brusnika.tech
                  tls:
                    credentialName: superset-tls-secret
            vault:
              name: vault-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - vault.stage.brusnika.sarex.lonsdaleites.ru
                  tls:
                    credentialName: vault-stage-tls
            zitadel:
              name: zitadel-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - zitadel.test.sarex.brusnika.tech
                  tls:
                    credentialName: zitadel-tls
            grafana:
              name: grafana-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - grafana.test.sarex.brusnika.tech
                  tls:
                    credentialName: grafana-tls
            openobserve:
              name: openobserve-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - openobserve.test.sarex.brusnika.tech
                  tls:
                    credentialName: openobserve-tls
            vmalert:
              name: vmalert-gw
              namespace: ingress-nginx
              selector:
                istio: ingressgateway
              servers:
                - hosts:
                    - vmalert.test.sarex.brusnika.tech
                  tls:
                    credentialName: vmalert-tls
                    
          virtualServices:
            camunda-identity-vs:
              namespace: camunda
              hosts:
                - identity.camunda.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/camunda-identity-gw
              routes:
                - path:
                    prefix: /
                  service: camunda-identity.camunda.svc.cluster.local
                  port: 80
            camunda-keycloak-vs:
              namespace: camunda
              hosts:
                - keycloak.camunda.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/camunda-keycloak-gw
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /auth/
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /auth/
                  service: camunda-keycloak.camunda.svc.cluster.local
                  port: 80
            camunda-operate-vs:
              namespace: camunda
              hosts:
                - operate.camunda.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/camunda-operate-gw
              routes:
                - path:
                    prefix: /
                  service: camunda-operate.camunda.svc.cluster.local
                  port: 80
            camunda-optimize-vs:
              namespace: camunda
              hosts:
                - optimize.camunda.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/camunda-optimize-gw
              routes:
                - path:
                    prefix: /
                  service: camunda-optimize.camunda.svc.cluster.local
                  port: 80
            camunda-tasklist-vs:
              namespace: camunda
              hosts:
                - tasklist.camunda.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/camunda-tasklist-gw
              routes:
                - path:
                    prefix: /
                  service: camunda-tasklist.camunda.svc.cluster.local
                  port: 80
            document-link-vs:
              namespace: documentations
              hosts:
                - document-link.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/document-link-gw
              cors:
                allowOrigins:
                  - regex: ".*"
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: frontend-service-public-link.documentations.svc.cluster.local
                  port: 80
            stamp-verification-vs:
              namespace: documentations
              hosts:
                - stamp-verification.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/stamp-verification-gw
              cors:
                allowOrigins:
                  - regex: ".*"
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: stamp-verification-frontend-service.documentations.svc.cluster.local
                  port: 8080
            gitea-vs:
              namespace: gitea
              hosts:
                - gitea.stage.brusnika.sarex.lonsdaleites.ru
              gateways:
                - ingress-nginx/gitea-gw
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: gitea.gitea.svc.cluster.local
                  port: 3000
            global-test-vs:
              namespace: global-ingress
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              cors:
                allowOrigins:
                  - exact: https://test.sarex.brusnika.tech
                  - exact: https://stamp-verification.test.sarex.brusnika.tech
                  - exact: https://document-link.test.sarex.brusnika.tech
                  - exact: https://login.brusnika.ru
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: nginx-service.global-ingress.svc.cluster.local
                  port: 80
            global-cde-vs:
              namespace: global-ingress
              hosts:
                - cde.brusnika.lonsdaleites.ru
              gateways:
                - ingress-nginx/global-cde-gw
              cors:
                allowOrigins:
                  - regex: ".*"
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: nginx-service.global-ingress.svc.cluster.local
                  port: 80


            jupyter-vs:
              namespace: jupyter
              hosts:
                - jupyter.brusnika.lonsdaleites.ru
              gateways:
                - ingress-nginx/jupyter-gw
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: jupyter.jupyter.svc.cluster.local
                  port: 8888
            dashboard-vs:
              namespace: kubernetes-dashboard
              hosts:
                - dashboard.brusnika.lonsdaleites.ru
              gateways:
                - ingress-nginx/dashboard-gw
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: kubernetes-dashboard-brusnika.kubernetes-dashboard.svc.cluster.local
                  port: 9090

            minio-vs:
              namespace: minio
              hosts:
                - minio.brusnika.lonsdaleites.ru
              gateways:
                - ingress-nginx/minio-gw
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: minio-svc.minio.svc.cluster.local
                  port: 9000

            superset-vs:
              namespace: superset
              hosts:
                - superset.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/superset-gw
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: superset.superset.svc.cluster.local
                  port: 8088

            vault-vs:
              namespace: vault
              hosts:
                - vault.stage.brusnika.sarex.lonsdaleites.ru
              gateways:
                - ingress-nginx/vault-gw
              routes:
                - match:
                    - port: 80
                      uri:
                        prefix: /
                  redirect:
                    scheme: https
                    redirectCode: 308
                - path:
                    prefix: /
                  service: vault-vault-contour.vault.svc.cluster.local
                  port: 8200

            zitadel-vs:
              namespace: zitadel
              hosts:
                - zitadel.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/zitadel-gw
              routes:
                - path:
                    prefix: /
                  service: zitadel-idp-contour.zitadel.svc.cluster.local
                  port: 8080
            grafana-vs:
              namespace: prometheus-stack
              hosts:
                - grafana.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/grafana-gw
              routes:
                - path:
                    prefix: /
                  service: prometheus-stack-grafana.prometheus-stack.svc.cluster.local
                  port: 80

            openobserve-vs:
              namespace: openobserve
              hosts:
                - openobserve.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/openobserve-gw
              routes:
                - path:
                    prefix: /
                  service: openobserve-web.openobserve.svc.cluster.local
                  port: 5080

            vmalert-vs:
              namespace: goalert
              hosts:
                - vmalert.test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/vmalert-gw
              routes:
                - path:
                    prefix: /
                  service: goalert.goalert.svc.cluster.local
                  port: 8081

            # ---- Migrated from ugok snapshot (batch 1) ----
            vs-bimv2-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /bimv2/api/
                  rewrite: /api/
                  service: backend-service.bim.svc.cluster.local
                  port: 8000

            vs-contracts-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /contracts/api/
                  rewrite: /api/
                  service: backend-service.contracts.svc.cluster.local
                  port: 8000
            vs-srx-admin-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /control-interface/
                  rewrite: /
                  service: srx-admin-svc.django.svc.cluster.local
                  port: 8080

            vs-documentations-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              cors:
                allowOrigins:
                  - exact: "*"
                extraAllowMethods:
                  - HEAD
                extraAllowHeaders:
                  - Range
                  - Cache-control
                allowCredentials: true
              routes:
                - match:
                    - uri:
                        prefix: /documentations/api/
                  rewrite: /api/
                  service: documentations-api.documentations.svc.cluster.local
                  port: 8080

            vs-documentations-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /documentations/static/
                  rewrite: /
                  service: documentation-frontend-static-service.documentations.svc.cluster.local
                  port: 80

            vs-files-stream:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /files/api/
                  rewrite: /api/
                  service: documentations-filestream.documentations.svc.cluster.local
                  port: 8080

            vs-pdm-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /gateway/api/
                  rewrite: /api/
                  service: pdm-api.documentations.svc.cluster.local
                  port: 8080

            vs-eav-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - path:
                    prefix: /eav/api/v0
                  rewrite: /api/v4
                  service: eav-service.eav.svc.cluster.local
                  port: 8000
                - path:
                    prefix: /eav/api/v2
                  rewrite: /api/v5
                  service: eav-service.eav.svc.cluster.local
                  port: 8000
                - path:
                    prefix: /eav/api/v3
                  rewrite: /api/v3
                  service: eav-service.eav.svc.cluster.local
                  port: 8000
                - path:
                    prefix: /eav/api/v4
                  rewrite: /api/v4
                  service: eav-service.eav.svc.cluster.local
                  port: 8000
                - path:
                    prefix: /eav/api/v1
                  rewrite: /api/v6
                  service: eav-service.eav.svc.cluster.local
                  port: 8000
                - path:
                    prefix: /eav/admin
                  rewrite: /admin
                  service: eav-service.eav.svc.cluster.local
                  port: 8000

            vs-flows-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /flows/api/
                  rewrite: /api/
                  service: backend-service.flows.svc.cluster.local
                  port: 8000

            vs-flows-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /flows/static/
                  rewrite: /
                  service: frontend-service.flows.svc.cluster.local
                  port: 80

            vs-issues-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /issues/api/
                  rewrite: /api/
                  service: issues-service.issues.svc.cluster.local
                  port: 80
                - match:
                    - uri:
                        prefix: /issues-management/
                  rewrite: /issues-management/
                  service: issues-service.issues.svc.cluster.local
                  port: 80
                - match:
                    - uri:
                        prefix: /issues-documentation/
                  rewrite: /issues-documentation/
                  service: issues-service.issues.svc.cluster.local
                  port: 80

            vs-issues-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /issues/static/
                  rewrite: /
                  service: static-service.issues.svc.cluster.local
                  port: 80

            vs-reviews-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /reviews/static/
                  rewrite: /
                  service: frontend-service.reviews.svc.cluster.local
                  port: 80

            vs-pm-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /pm/
                  rewrite: /
                  service: frontend-service.pm.svc.cluster.local
                  port: 80

            vs-projects-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /projects/static/
                  rewrite: /
                  service: frontend-service.projects.svc.cluster.local
                  port: 8000

            vs-rfi-static:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /rfi/static/
                  rewrite: /
                  service: rfi-frontend-service.rfi.svc.cluster.local
                  port: 80

            vs-transmittal-frontend:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /transmittal/static/
                  rewrite: /
                  service: transmittal-frontend-static.transmittal.svc.cluster.local
                  port: 80

            vs-rfi-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /rfi/api/
                  rewrite: /api/
                  service: rfi-backend-api-svc.rfi.svc.cluster.local
                  port: 80

            vs-transmittal-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /transmittals/api/
                  rewrite: /api/
                  service: transmittal-service.transmittal.svc.cluster.local
                  port: 80

            vs-workspaces-api:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /workspaces/api/
                  rewrite: /api/
                  service: workspaces-service.workspaces.svc.cluster.local
                  port: 8000

            vs-resources-admin:
              namespace: ingress-nginx
              hosts:
                - test.sarex.brusnika.tech
              gateways:
                - ingress-nginx/main-gateway
              routes:
                - match:
                    - uri:
                        prefix: /resource-management
                  rewrite: /resource-management
                  service: resources-service.resources.svc.cluster.local
                  port: 8000

#            vs-workspaces-frontend-v2:
#              namespace: ingress-nginx
#              hosts:
#                - test.sarex.brusnika.tech
#              gateways:
#                - ingress-nginx/main-gateway
#              routes:
#                - match:
#                    - uri:
#                        prefix: /workspaces-v2/worker/
#                  rewrite: /worker/
#                  service: workspaces-v2-frontend-static-service.workspaces.svc.cluster.local
#                  port: 8080
