## FIXME: move to dataplane folder until all regions are migrated to new dataplane cd.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/auth-cache-key: $tenant$remote_user$http_authorization
    nginx.ingress.kubernetes.io/auth-url: https://us-west-2.nightly.shared.aws.tidbcloud.com/api/v1/orgs/$tenant/users/me
    nginx.ingress.kubernetes.io/cors-allow-methods: GET
    nginx.ingress.kubernetes.io/cors-allow-origin: '*'
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/use-regex: "true"
    nginx.ingress.kubernetes.io/configuration-snippet: |
      set $tenant $2;
      access_by_lua_block {
        local dynamic_route = require("dynamic_route")
        dynamic_route.rewrite_url()
      }
  name: dev-dataplane-read
  namespace: observability
spec:
  ingressClassName: nginx
  rules:
  - http:
      paths:
      - backend:
          service:
            name: vmselect-vmcluster
            port:
              number: 8481
        path: /external/metrics/(dev-devtier)/tenant/(.*)/project/(.*)/application/(.*)/(api/v1/.*)
        pathType: ImplementationSpecific
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/auth-cache-key: $tenant$remote_user$http_authorization
    nginx.ingress.kubernetes.io/auth-url: https://us-west-2.staging.shared.aws.tidbcloud.com/api/v1/orgs/$tenant/users/me
    nginx.ingress.kubernetes.io/cors-allow-methods: GET
    nginx.ingress.kubernetes.io/cors-allow-origin: '*'
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/use-regex: "true"
    nginx.ingress.kubernetes.io/configuration-snippet: |
      set $tenant $2;
      access_by_lua_block {
        local dynamic_route = require("dynamic_route")
        dynamic_route.rewrite_url()
      }
  name: staging-dataplane-read
  namespace: observability
spec:
  ingressClassName: nginx
  rules:
  - http:
      paths:
      - backend:
          service:
            name: vmselect-vmcluster
            port:
              number: 8481
        path: /external/metrics/(staging-devtier)/tenant/(.*)/project/(.*)/application/(.*)/(api/v1/.*)
        pathType: ImplementationSpecific
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/auth-cache-key: $tenant$remote_user$http_authorization
    nginx.ingress.kubernetes.io/auth-url: https://us-west-2.prod.aws.tidbcloud.com/api/v1/orgs/$tenant/users/me
    nginx.ingress.kubernetes.io/cors-allow-methods: GET
    nginx.ingress.kubernetes.io/cors-allow-origin: '*'
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/use-regex: "true"
    nginx.ingress.kubernetes.io/configuration-snippet: |
      set $tenant $2;
      access_by_lua_block {
        local dynamic_route = require("dynamic_route")
        dynamic_route.rewrite_url()
      }
  name: dataplane-read
  namespace: observability
spec:
  ingressClassName: nginx
  rules:
  - http:
      paths:
      - backend:
          service:
            name: vmselect-vmcluster
            port:
              number: 8481
        path: /external/metrics/(prod-devtier)/tenant/(.*)/project/(.*)/application/(.*)/(api/v1/.*)
        pathType: ImplementationSpecific