add scuderia fe+be (path-based routing)

charts/app/templates/ingress.yaml

@@ -8,21 +8,26 @@ metadata:
   name: {{ include "app.name" . }}
   labels:
     {{- include "app.labels" . | nindent 4 }}
+  {{- if .Values.ingress.tls }}
   annotations:
     # Phase 1: cert-manager issues the cert. Phase 2: external-dns reads the
-    # host below and creates the DNS record. Both driven off this one Ingress.
+    # host below and creates the DNS record. When tls is false (a secondary
+    # path on a shared host), this Ingress owns neither — it just adds a route.
     cert-manager.io/cluster-issuer: {{ .Values.ingress.clusterIssuer }}
+  {{- end }}
 spec:
   ingressClassName: {{ .Values.ingress.className }}
+  {{- if .Values.ingress.tls }}
   tls:
     - hosts:
         - {{ .Values.ingress.host }}
       secretName: {{ .Values.ingress.tlsSecretName | default (printf "%s-tls" (include "app.name" .)) }}
+  {{- end }}
   rules:
     - host: {{ .Values.ingress.host }}
       http:
         paths:
-          - path: /
+          - path: {{ .Values.ingress.path }}
             pathType: Prefix
             backend:
               service: