resource "helm_release" "cert_manager" {
  name       = "cert-manager"
  namespace  = kubernetes_namespace.cert_manager.metadata[0].name
  repository = "https://charts.jetstack.io"
  chart      = "cert-manager"
  version    = "1.17.2"

  values = [<<EOF
installCRDs: true
EOF
  ]
}

resource "helm_release" "nginx_ingress" {
  name       = "nginx-ingress"
  repository = "https://kubernetes.github.io/ingress-nginx"
  chart      = "ingress-nginx"
  version    = "4.12.2"
  namespace  = kubernetes_namespace.nginx.metadata[0].name

  values = [
    <<EOF
controller:
  replicaCount: 1
  service:
    type: LoadBalancer
    annotations:
      lb.stackit.cloud/external-address: ${stackit_public_ip.public_ip.ip}
EOF
  ]

  timeout = 600
}

resource "helm_release" "rancher" {
  name       = "rancher"
  namespace  = kubernetes_namespace.rancher.metadata[0].name
  repository = "https://releases.rancher.com/server-charts/stable"
  chart      = "rancher"
  version    = "2.11.1"

  values = [<<EOF
hostname: "${stackit_dns_record_set.ui_a_record.name}.${stackit_dns_zone.rancher_zone.dns_name}"
ingress:
  enabled: true
  ingressClassName: "nginx"

  tls:
    source: rancher
    secretName: tls-rancher-ingress

EOF
  ]

  depends_on = [helm_release.cert_manager]
}