k8s/bootstrap/ingress/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# No top-level namespace - resources declare their own namespaces
resources:
  # ingress-nginx-controller-alias.yaml REMOVED — it was a ClusterIP Service named
  # ingress-nginx-controller with a stale selector (instance: ingress-nginx-bootstrap,
  # a release that no longer exists). ingress-config's selfHeal kept re-applying it
  # over the helm release's real LoadBalancer Service of the same name, reverting it
  # to a ClusterIP with zero endpoints -> LB IP .160 unannounced -> cluster-wide
  # outage. CoreDNS rewrites *.riotpiao.com to ingress-nginx-controller.ingress-nginx
  # .svc, which is the helm Service directly — no alias needed.
  - riotpiao-com-cert.yaml                # Certificate for *.riotpiao.com (ingress-nginx namespace)
  - ingress.yaml                           # Ingress rules for all services (multiple namespaces)
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
refactor(argocd): consolidate Applications (39→35) 2026-07-23 07:29:51 -07:00			`# No top-level namespace - resources declare their own namespaces`
			`resources:`
fix(ingress): remove stale ingress-nginx-controller-alias Service — its selfHeal kept clobbering the helm LoadBalancer Service (same name, dead ingress-nginx-bootstrap selector, 0 endpoints), unannouncing LB IP .160 and taking down all ingress 2026-08-13 07:40:23 -07:00			`# ingress-nginx-controller-alias.yaml REMOVED — it was a ClusterIP Service named`
			`# ingress-nginx-controller with a stale selector (instance: ingress-nginx-bootstrap,`
			`# a release that no longer exists). ingress-config's selfHeal kept re-applying it`
			`# over the helm release's real LoadBalancer Service of the same name, reverting it`
			`# to a ClusterIP with zero endpoints -> LB IP .160 unannounced -> cluster-wide`
			`# outage. CoreDNS rewrites *.riotpiao.com to ingress-nginx-controller.ingress-nginx`
			`# .svc, which is the helm Service directly — no alias needed.`
fix(ingress): add service alias for CoreDNS compatibility 2026-07-23 07:44:52 -07:00			`- riotpiao-com-cert.yaml # Certificate for *.riotpiao.com (ingress-nginx namespace)`
			`- ingress.yaml # Ingress rules for all services (multiple namespaces)`