resource "helm_release" "traefik" {
  name             = "traefik"
  namespace        = local.traefik_namespace
  create_namespace = true

  repository = "https://helm.traefik.io/traefik"
  chart      = "traefik"

  values = [
    jsonencode({
      rbac = {
        enabled    = true
        namespaced = false # traefik works for the whole cluster
      }
      podSecurityPolicy = {
        enabled = false
      }
      deployment = {
        enabled = false
      }
      daemonset = {
        enabled = false
      }
      service = {
        enabled = false
      }
      ingressroute = {
        dashboard = { enabled = false }
      }
    })
  ]
}