3e6f49596d
Three contabo-mkt Flux Kustomizations were broken by my recent PRs: - flux-system/catalyst-platform: PR #260 added a Helm-template-syntax CRD at products/catalyst/chart/templates/crd-provisioningstate.yaml. Contabo's Flux Kustomization reads this path as raw YAML and chokes on the {{ }} blocks. Moved the CRD to products/catalyst/chart/crds/ (Helm convention — installed unconditionally, not Helm-templated). - flux-system/marketplace-api: PR #246 deleted the kustomization.yaml index file that contabo's Flux Kustomization needs to enumerate manifests. PR #280 deleted the marketplace-api/ingress.yaml. Restored both as raw YAML. - flux-system/sme-services: PR #281 deleted the entire sme-services/ directory. Restored all 14 manifest files as raw YAML. Sovereign-side: added .helmignore entries so Sovereign HelmRelease installs (otech, omantel) skip the contabo-only files entirely: - templates/ingress.yaml (Traefik Middleware + Ingress for console) - templates/ingress-console-tls.yaml (TLS-terminating ingress, NEW — was missing on contabo, causing TRAEFIK DEFAULT CERT errors) - templates/sme-services/ - templates/marketplace-api/ Bumped 1.1.6 -> 1.1.8. Cluster impact: - contabo: 3 broken Kustomizations recover; console.openova.io gets proper Let's Encrypt cert via the new console-openova-tls Certificate. - otech / omantel Sovereigns: no contabo-mkt content rendered; install works clean against chart 1.1.8. Co-authored-by: hatiyildiz <hatice.yildiz@openova.io> Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
44 lines
1.1 KiB
YAML
44 lines
1.1 KiB
YAML
# Contabo-mkt only — TLS-terminating ingress for console.openova.io.
|
|
# Sovereigns skip via .helmignore (they use Cilium gateway, not Traefik).
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: console-openova-tls
|
|
namespace: catalyst
|
|
spec:
|
|
secretName: console-openova-tls
|
|
issuerRef:
|
|
name: letsencrypt-prod
|
|
kind: ClusterIssuer
|
|
commonName: console.openova.io
|
|
dnsNames:
|
|
- console.openova.io
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: console-openova-tls
|
|
namespace: catalyst
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.priority: "200"
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
traefik.ingress.kubernetes.io/router.middlewares: "catalyst-strip-sovereign@kubernetescrd"
|
|
spec:
|
|
ingressClassName: traefik
|
|
tls:
|
|
- hosts:
|
|
- console.openova.io
|
|
secretName: console-openova-tls
|
|
rules:
|
|
- host: console.openova.io
|
|
http:
|
|
paths:
|
|
- path: /sovereign
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: catalyst-ui
|
|
port:
|
|
number: 80
|