# Configuration Ingress pour MinIO RBER
# Deux Ingress nécessaires : API S3 et Console Web

---
# Ingress pour l'API MinIO (S3) - Port 9000
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: minio-api-ingress
  namespace: object-store
  annotations:
    haproxy.org/timeout-client: "3600s"
    haproxy.org/timeout-server: "3600s"
    haproxy.org/timeout-http-request: "3600s"
    haproxy.org/timeout-http-keep-alive: "3600s"
    # Augmenter la taille max pour les uploads
    haproxy.org/request-set-header: |
      X-Forwarded-Proto https if { ssl_fc }
    # Désactiver le buffering pour les gros fichiers
    haproxy.org/server-proto: "h1"
spec:
  ingressClassName: haproxy
  rules:
  - host: s3.rber.bj
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: minio
            port:
              number: 9000
  # Si vous avez configuré TLS
  # tls:
  # - hosts:
  #   - s3.rber.bj
  #   secretName: minio-tls-secret

---
# Ingress pour la Console MinIO (Interface Web) - Port 9001
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: minio-console-ingress
  namespace: object-store
  annotations:
    haproxy.org/timeout-client: "3600s"
    haproxy.org/timeout-server: "3600s"
    haproxy.org/server-proto: "h1"
    # Important pour WebSocket (console interactive)
    haproxy.org/backend-config-snippet: |
      option http-server-close
      option forwardfor
spec:
  ingressClassName: haproxy
  rules:
  - host: console.s3.rber.bj
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: minio
            port:
              number: 9001
  # Si vous avez configuré TLS
  # tls:
  # - hosts:
  #   - console.s3.rber.bj
  #   secretName: minio-console-tls-secret

---
# Alternative : Un seul Ingress avec path-based routing
# (moins recommandé pour MinIO)
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: minio-unified-ingress
  namespace: object-store
  annotations:
    haproxy.org/timeout-client: "3600s"
    haproxy.org/timeout-server: "3600s"
    haproxy.org/path-rewrite: "/console /"
spec:
  ingressClassName: haproxy
  rules:
  - host: s3.rber.bj
    http:
      paths:
      # API S3
      - path: /
        pathType: Prefix
        backend:
          service:
            name: minio
            port:
              number: 9000
      # Console (via sous-chemin)
      - path: /console
        pathType: Prefix
        backend:
          service:
            name: minio
            port:
              number: 9001