workload:
  metadata:
    annotations:
      keel.sh/policy: force
      keel.sh/trigger: poll
      keel.sh/initContainers: 'true'

ingress:
  main:
    metadata:
      annotations:
        kubernetes.io/ingress.class: traefik
        traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
        kubernetes.io/tls-acme: "true"
        kubernetes.io/ingress.allow-http: "false"
        kubernetes.io/ingress.global-static-ip-name: ""
        cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
        traefik.ingress.kubernetes.io/router.middlewares: public-xray-xraydocsauth@kubernetescrd

extra:
  templates:
    - |-
      apiVersion: v1
      kind: Secret
      metadata:
        name: xray-docs-auth
      stringData:
        users: |
          ilove:$apr1$N65S3o4r$Yc9pJnHPN4tUE1ZLzJsGI.
    - |-
      apiVersion: traefik.io/v1alpha1
      kind: Middleware
      metadata:
        name: xraydocsauth
      spec:
        basicAuth:
          secret: xray-docs-auth