From 367dac550f51481921ac2f63f6caf19ff16139e8 Mon Sep 17 00:00:00 2001
From: Ishrath Ahamed <Ishrath.Ahamed@cloudsolutions.com.sa>
Date: Fri, 13 Jun 2025 11:09:42 +0530
Subject: [PATCH] add auth-realms-rewrite ingress configuration and update
 umm-ingress app-root path

---
 ingress/auth-realms-rewrite-ingress.yaml | 30 ++++++++++++++++++++++++
 ingress/umm-ingress.yml                  |  2 +-
 2 files changed, 31 insertions(+), 1 deletion(-)
 create mode 100644 ingress/auth-realms-rewrite-ingress.yaml

diff --git a/ingress/auth-realms-rewrite-ingress.yaml b/ingress/auth-realms-rewrite-ingress.yaml
new file mode 100644
index 0000000..8cc2a40
--- /dev/null
+++ b/ingress/auth-realms-rewrite-ingress.yaml
@@ -0,0 +1,30 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    kubernetes.io/tls-acme: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: 100m
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: 360s
+    nginx.ingress.kubernetes.io/proxy-read-timeout: 360s
+    nginx.ingress.kubernetes.io/proxy-send-timeout: 360s
+    nginx.ingress.kubernetes.io/rewrite-target: /realms/$1
+    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+    nginx.ingress.kubernetes.io/ssl-redirect: "false"
+    nginx.ingress.kubernetes.io/use-regex: "true"
+    nginx.org/proxy-connect-timeout: 60s
+    nginx.org/proxy-read-timeout: 60s
+  name: auth-realms-rewrite-ingress
+  namespace: csi-uat
+spec:
+  rules:
+  - host: quat.cloudsolutions.lk
+    http:
+      paths:
+      - backend:
+          service:
+            name: csi-iam-service
+            port:
+              number: 80
+        path: /auth/(realms/.*)
+        pathType: ImplementationSpecific
\ No newline at end of file
diff --git a/ingress/umm-ingress.yml b/ingress/umm-ingress.yml
index 9309ce0..2a1a8f9 100644
--- a/ingress/umm-ingress.yml
+++ b/ingress/umm-ingress.yml
@@ -3,7 +3,7 @@ kind: Ingress
 metadata:
   annotations:
     kubernetes.io/ingress.class: nginx
-    nginx.ingress.kubernetes.io/app-root: /auth/admin/csi/console
+    nginx.ingress.kubernetes.io/app-root: /admin/master/console
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/proxy-body-size: 50m
     nginx.ingress.kubernetes.io/proxy-read-timeout: "1200"