rock
58bf245920
poimen-memory is a ClusterIP service on :8080, so a local pi session had no route to the API. This adds an edge Ingress on the same nginx class and the same Cloudflare-terminated shape as the frontend ingress. Auth stays ZITADEL JWT (MEM_AUTH_MODE=jwt): a request without a valid bearer token gets 401, so exposing the route does not expose the data. Requires one Cloudflare proxied A record: api-poimen.riotpiao.com -> 192.168.1.160
11 lines
412 B
YAML
11 lines
412 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
# Edge Ingress for poimen.riotpiao.com.
|
|
# Same pattern as k8s/apps/api/ (api-gw ingress).
|
|
# App manifests (Deployment, Service, NetworkPolicy) live in
|
|
# riotpiao-poimen/poimen-frontend.git k8s/ — each repo owns its own k8s.
|
|
resources:
|
|
- ingress.yaml
|
|
# The memory API. Without it a local pi session has no route to :8080.
|
|
- api-ingress.yaml
|