# Ingress 配置 - MCP Server
# 支持 Azure Application Gateway Ingress Controller 或 NGINX Ingress Controller
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: mcp-server-ingress
  namespace: taiji-ai
  labels:
    app: mcp-server
  annotations:
    # 使用 NGINX Ingress Controller (如果使用 AGIC，请更换注解)
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/proxy-body-size: "50m"
    nginx.ingress.kubernetes.io/proxy-connect-timeout: "60"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
    
    # CORS 配置
    nginx.ingress.kubernetes.io/enable-cors: "true"
    nginx.ingress.kubernetes.io/cors-allow-origin: "*"
    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, PUT, POST, DELETE, PATCH, OPTIONS"
    nginx.ingress.kubernetes.io/cors-allow-headers: "DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization"
    
    # Let's Encrypt 证书 (需要 cert-manager)
    # cert-manager.io/cluster-issuer: "letsencrypt-prod"
spec:
  ingressClassName: nginx
  # TLS 配置 (如果有证书)
  # tls:
  # - hosts:
  #   - api.taiji-ai.com
  #   secretName: mcp-server-tls
  rules:
  - host: mcp.taiji-ai.com
    http:
      paths:
      # API 路由
      - path: /
        pathType: Prefix
        backend:
          service:
            name: mcp-server
            port:
              number: 8000

---
# Azure Application Gateway Ingress Controller 配置 (备选)
# 如果使用 AGIC，请使用以下配置替换上面的 Ingress
# apiVersion: networking.k8s.io/v1
# kind: Ingress
# metadata:
#   name: mcp-server-ingress-agic
#   namespace: taiji-ai
#   annotations:
#     kubernetes.io/ingress.class: azure/application-gateway
#     appgw.ingress.kubernetes.io/ssl-redirect: "true"
#     appgw.ingress.kubernetes.io/connection-draining: "true"
#     appgw.ingress.kubernetes.io/connection-draining-timeout: "30"
#     appgw.ingress.kubernetes.io/backend-protocol: "http"
# spec:
#   tls:
#   - hosts:
#     - api.taiji-ai.com
#     secretName: mcp-server-tls
#   rules:
#   - host: api.taiji-ai.com
#     http:
#       paths:
#       - path: /
#         pathType: Prefix
#         backend:
#           service:
#             name: mcp-server
#             port:
#               number: 8000