{{/* vim: set filetype=mustache: */}}
{{/*
Expand the name of the chart.
*/}}
{{- define "nginx-ingress-services.name" -}}
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
{{- end -}}

{{/*
Create a default fully qualified app name.
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
*/}}
{{- define "nginx-ingress-services.fullname" -}}
{{- $name := default .Chart.Name .Values.nameOverride -}}
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
{{- end -}}

{{/*
Determine DNS zone based on one of the given FQDNs
*/}}
{{- define "nginx-ingress-services.zone" -}}
{{- $zones := splitList "." .Values.config.dns.https -}}
{{- slice $zones 1 | join "." -}}
{{- end -}}

{{/*
Generate the secrate name in a conistent way, since it's referred to in multiple places, while
at the same time being used for distinct scenarios
*/}}
{{- define "nginx-ingress-services.getCertificateSecretName" -}}
{{- $nameParts := list (include "nginx-ingress-services.fullname" .) -}}
{{- if .Values.tls.useCertManager -}}
    {{- $nameParts = append $nameParts "managed" -}}
{{- else -}}
    {{- $nameParts = append $nameParts "wildcard" -}}
{{- end -}}
{{- $nameParts = append $nameParts "tls-certificate" -}}
{{- join "-" $nameParts -}}
{{- end -}}

{{/*
Generate the secret name in a conistent way, since it's referred to in multiple places, while
at the same time being used for distinct scenarios
*/}}
{{- define "nginx-ingress-services.getCustomSolversSecretName" -}}
{{- $nameParts := list (include "nginx-ingress-services.fullname" .) -}}
{{- $nameParts = append $nameParts "cert-manager-custom-solvers" -}}
{{- join "-" $nameParts -}}
{{- end -}}

{{/*
Returns the Letsencrypt API server URL based on whether testMode is enabled or disabled
*/}}
{{- define "certificate-manager.apiServerURL" -}}
{{- $hostnameParts := list "acme" -}}
{{- if .Values.certManager.inTestMode -}}
    {{- $hostnameParts = append $hostnameParts "staging" -}}
{{- end -}}
{{- $hostnameParts = append $hostnameParts "v02" -}}
{{- join "-" $hostnameParts | printf "https://%s.api.letsencrypt.org/directory" -}}
{{- end -}}

{{/* Allow KubeVersion to be overridden. */}}
{{- define "kubeVersion" -}}
{{- default .Capabilities.KubeVersion.Version .Values.kubeVersionOverride -}}
{{- end -}}

{{- define "integrationTestHelperNewLabels" -}}
  {{- (semverCompare ">= 1.23-0" (include "kubeVersion" .)) -}}
{{- end -}}

{{/*
Name of the ingress. Extracted as helper to reduce the complexity in the template
itself. The default name is 'nginx-ingress' for backwards compatibility (it has
been this name in previous versions.)
*/}}
{{- define "nginx-ingress-services.getIngressName" -}}
{{- if (eq .Values.ingressName "") -}}
nginx-ingress
{{- else -}}
nginx-ingress-{{ .Values.ingressName }}
{{- end -}}
{{- end -}}

{{/*
Name of the minio ingress. Extracted as helper to reduce the complexity in the template
itself. The default name is 'minio-ingress' for backwards compatibility (it has
been this name since version 5.7.0.)
Why do we need to be able to change this name? For multi-ingress setups, we'll
have multiple of these ingresses (which need unique names).
*/}}
{{- define "nginx-ingress-services.getMinioIngressName" -}}
{{- if (eq .Values.ingressName "") -}}
minio-ingress
{{- else -}}
minio-ingress-{{ .Values.ingressName }}
{{- end -}}
{{- end -}}

{{/*
Name of the certificate 'Issuer'. Especially, used in 'issuerRef's.
In multi-domain backends (multi-ingress), the 'ingressName' is used as postfix
of the name to ensure that certificates aren't accidentally all issued by the
same issuer; which may leak a hint about a common origin.
*/}}
{{- define "nginx-ingress-services.getIssuerName" -}}
{{- if (eq .Values.ingressName "") -}}
{{ .Values.tls.issuer.name }}
{{- else -}}
{{ .Values.tls.issuer.name }}-{{ .Values.ingressName }}
{{- end -}}
{{- end -}}
