fix

apps/code-server/forward.tf

@@ -7,11 +7,41 @@ locals {
   forward-outpost-providers = jsondecode(data.http.get_forward_outpost.response_body).results[0].providers
   forward-outpost-pk = jsondecode(data.http.get_forward_outpost.response_body).results[0].pk
   app-name = var.component == var.instance ? var.instance : format("%s-%s", var.component, var.instance)
-  app-icon = "dashboard/statics/icons/favicon-96x96.png"
+  app-icon = "_static/src/browser/media/favicon-dark-support.svg"
   main-group = format("%s-users", local.app-name)
   sub-groups = []
   external-url = format("https://%s", local.dns-names[0])
   access-token-validity = "hours=10" // ;minutes=10
+  rules-icons = [ for v in local.dns-names : {
+      "host" = "${v}"
+      "http" = {
+        "paths" = [{
+          "backend"  = {
+            "service" = local.service
+          }
+          "path"     = "/${local.app-icon}"
+          "pathType" = "Prefix"
+        }]
+      }
+    }]
+}
+
+resource "kubectl_manifest" "prj_ingress_icon" {
+  force_conflicts = true
+  yaml_body  = <<-EOF
+    apiVersion: "networking.k8s.io/v1"
+    kind: "Ingress"
+    metadata:
+      name: "${var.instance}-icons"
+      namespace: "${var.namespace}"
+      labels: ${jsonencode(local.common-labels)}
+    spec:
+      ingressClassName: "${var.ingress-class}"
+      rules: ${jsonencode(local.rules-icons)}
+      tls:
+      - hosts: ${jsonencode(local.dns-names)}
+        secretName: "${var.instance}-cert"
+  EOF
 }
 
 data "authentik_flow" "default-authorization-flow" {