apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  name: frigate
  namespace: frigate
spec:
  hosts:
    - frigate.kube.huskypup.net
  gateways:
    - istio-system/edge
  http:
    # Authentik forward-auth endpoints must be reachable on the protected host
    - match:
        - uri:
            prefix: /outpost.goauthentik.io
      route:
        - destination:
            host: authentik-server.authentik.svc.cluster.local
            port:
              number: 80

    - timeout: 3600s
      route:
        - destination:
            host: frigate.frigate.svc.cluster.local
            port:
              number: 5000