apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: full-vmcp-ngorse-ingress
  namespace: toolhive-system
  labels:
    app.kubernetes.io/name: full-vmcp
  annotations:
    dns.internal: 'true'
    dns.internal.hostname: full-vmcp.ngorse.com
spec:
  entryPoints:
    - websecure
  routes:
    # - kind: Rule
    #   match: Host(`mcp.ngorse.com`)
    #   services:
    #     - name: vmcp-full-vmcp
    #       namespace: toolhive-system
    #       port: 4483
    - kind: Rule
      match: Host(`full-vmcp.ngorse.com`)
      services:
        - name: vmcp-full-vmcp
          namespace: toolhive-system
          port: 4483
  # No default TLSStore in this cluster, so reference the wildcard cert
  # explicitly. olb42-wildcard-tls is auto-reflected into every namespace.
  tls:
    secretName: ngorse-wildcard-tls