# Traefik Dashboard IngressRoute (HTTPS access)
# Named traefik-dashboard-https to avoid conflict with k3s built-in
# Traefik Helm chart which creates its own "traefik-dashboard" IngressRoute
# on the internal "traefik" entrypoint (port 9000).
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: traefik-dashboard-https
  namespace: kube-system
spec:
  entryPoints:
    - websecure
  routes:
    - match: HostRegexp(`traefik.k3s\..+\.local`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))
      kind: Rule
      middlewares:
        - name: sslheader
          namespace: kube-system
      services:
        - name: api@internal
          kind: TraefikService
  tls: {}