# Traefik IngressRoute: route /api/v1/licenses/* and /api/v1/keys/* at
# neurontechnologies.ai to the neuron-license service.
#
# The marketing site webhook calls: POST ${NEURON_LICENSE_API_URL}/api/v1/licenses/provision
# Set NEURON_LICENSE_API_URL = https://neurontechnologies.ai in GCP Cloud Run.
# (The Legion k8s deployment uses the cluster-internal URL directly.)

apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: neuron-license-api
  namespace: neuron-prod
spec:
  entryPoints:
    - websecure
  routes:
    - match: Host(`neurontechnologies.ai`) && (PathPrefix(`/api/v1/licenses`) || PathPrefix(`/api/v1/keys`) || PathPrefix(`/api/v1/organizations`))
      kind: Rule
      services:
        - name: neuron-license
          port: 8082