{{- if .Values.ingress.enabled }}
{{- $fullName := include "gitdata.fullname" . }}
{{- $controller := default "nginx" .Values.ingress.controller }}
{{- $tlsSecret := default (printf "%s-tls" $fullName) .Values.ingress.tls.secretName }}
{{- $annotations := deepCopy .Values.ingress.annotations }}
{{- if eq $controller "nginx" }}
{{- /* ingress-nginx：正则路由 + 大包/长连接超时（用户 annotations 优先于这里的默认值） */}}
{{- $nginxDefaults := dict
      "nginx.ingress.kubernetes.io/use-regex" "true"
      "nginx.ingress.kubernetes.io/proxy-body-size" .Values.ingress.proxyBodySize
      "nginx.ingress.kubernetes.io/proxy-read-timeout" (printf "%v" .Values.ingress.proxyReadTimeout)
      "nginx.ingress.kubernetes.io/proxy-send-timeout" (printf "%v" .Values.ingress.proxySendTimeout)
      "nginx.ingress.kubernetes.io/proxy-connect-timeout" (printf "%v" .Values.ingress.proxyConnectTimeout)
 }}
{{- $annotations = mergeOverwrite (mustFromJson (toJson $nginxDefaults)) $annotations }}
{{- end }}
{{- if and .Values.ingress.tls.enabled .Values.ingress.tls.clusterIssuer }}
{{- $_ := set $annotations "cert-manager.io/cluster-issuer" .Values.ingress.tls.clusterIssuer }}
{{- end }}
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: {{ $fullName }}
  labels:
    {{- include "gitdata.labels" . | nindent 4 }}
  {{- if $annotations }}
  annotations:
    {{- toYaml $annotations | nindent 4 }}
  {{- end }}
spec:
  {{- with .Values.ingress.className }}
  ingressClassName: {{ . }}
  {{- end }}
  {{- if .Values.ingress.tls.enabled }}
  tls:
    - hosts:
        - {{ .Values.ingress.host | quote }}
      secretName: {{ $tlsSecret }}
  {{- end }}
  rules:
    - host: {{ .Values.ingress.host | quote }}
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: {{ printf "%s-apihost" $fullName }}
                port:
                  name: http
{{- end }}