fix

apps/traefik-ui/forward.tf

@@ -11,8 +11,37 @@ locals {
   main-group = format("%s-users", local.app-name)
   sub-groups = []
   access-token-validity = "minutes=10"
+  rules-icons = [ for v in local.dns-names : {
+      "host" = "${v}"
+      "http" = {
+        "paths" = [{
+          "backend"  = {
+            "service" = local.service
+          }
+          "path"     = "/${local.app-icon}"
+          "pathType" = "Prefix"
+        }]
+      }
+    }]
 }
 
+resource "kubectl_manifest" "prj_ingress_icon" {
+  force_conflicts = true
+  yaml_body  = <<-EOF
+    apiVersion: "networking.k8s.io/v1"
+    kind: "Ingress"
+    metadata:
+      name: "${var.instance}-icons"
+      namespace: "${var.namespace}"
+      labels: ${jsonencode(local.common-labels)}
+    spec:
+      ingressClassName: "${var.ingress-class}"
+      rules: ${jsonencode(local.rules-icons)}
+      tls:
+      - hosts: ${jsonencode(local.dns-names)}
+        secretName: "${var.instance}-cert"
+  EOF
+}
 
 data "authentik_flow" "default-authorization-flow" {
   depends_on = [authentik_group.prj_users]

apps/traefik-ui/index.yaml

@@ -6,12 +6,12 @@ metadata:
   name: traefik-ui
   description: Access to the Traefik UI
 options:
-  sub-domain:
-    default: traefik
+  issuer:
+    default: letsencrypt-prod
     examples:
-    - traefik
+    - letsencrypt-prod
     type: string
-  ingress-class:
+  sub-domain:
     default: traefik
     examples:
     - traefik
@@ -21,16 +21,16 @@ options:
     examples:
     - your_company.com
     type: string
+  ingress-class:
+    default: traefik
+    examples:
+    - traefik
+    type: string
   domain:
     default: your-company
     examples:
     - your-company
     type: string
-  issuer:
-    default: letsencrypt-prod
-    examples:
-    - letsencrypt-prod
-    type: string
 dependencies:
 - dist: null
   category: share
@@ -42,3 +42,4 @@ providers:
   postgresql: null
   restapi: true
   http: true
+tfaddtype: null