apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: bakery-ingress
  namespace: bakery-ia
  annotations:
    # Enable HTTPS redirect
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
    # Update CORS for HTTPS
    nginx.ingress.kubernetes.io/cors-allow-origin: "https://bakery-ia.local,https://api.bakery-ia.local,https://monitoring.bakery-ia.local"
    # Cert-manager annotations - using local CA for development
    cert-manager.io/cluster-issuer: "local-ca-issuer"
spec:
  tls:
  - hosts:
    - bakery-ia.local
    - api.bakery-ia.local
    - monitoring.bakery-ia.local
    secretName: bakery-ia-tls-cert