From 70fcf111b953ba6938d7afda954172c8262c48ac Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Thu, 23 Jul 2026 07:44:52 -0700
Subject: [PATCH] fix(ingress): add service alias for CoreDNS compatibility
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

CoreDNS rewrites *.riotpiao.com → ingress-nginx-controller but bootstrap
deployed as ingress-nginx-bootstrap-controller. Service alias makes both work.
---
 .../ingress-nginx-controller-alias.yaml       | 22 +++++++++++++++++++
 k8s/bootstrap/ingress/kustomization.yaml      |  5 +++--
 2 files changed, 25 insertions(+), 2 deletions(-)
 create mode 100644 k8s/bootstrap/ingress/ingress-nginx-controller-alias.yaml

diff --git a/k8s/bootstrap/ingress/ingress-nginx-controller-alias.yaml b/k8s/bootstrap/ingress/ingress-nginx-controller-alias.yaml
new file mode 100644
index 0000000..47661d0
--- /dev/null
+++ b/k8s/bootstrap/ingress/ingress-nginx-controller-alias.yaml
@@ -0,0 +1,22 @@
+# Service alias for CoreDNS compatibility
+# CoreDNS rewrites *.riotpiao.com → ingress-nginx-controller.ingress-nginx.svc
+# But bootstrap deployed as ingress-nginx-bootstrap-controller
+# This alias makes both names work
+apiVersion: v1
+kind: Service
+metadata:
+  name: ingress-nginx-controller
+  namespace: ingress-nginx
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: ingress-nginx
+    app.kubernetes.io/instance: ingress-nginx-bootstrap
+    app.kubernetes.io/component: controller
+  ports:
+  - name: http
+    port: 80
+    targetPort: http
+  - name: https
+    port: 443
+    targetPort: https
diff --git a/k8s/bootstrap/ingress/kustomization.yaml b/k8s/bootstrap/ingress/kustomization.yaml
index 10db163..c875a71 100644
--- a/k8s/bootstrap/ingress/kustomization.yaml
+++ b/k8s/bootstrap/ingress/kustomization.yaml
@@ -2,5 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 # No top-level namespace - resources declare their own namespaces
 resources:
-  - riotpiao-com-cert.yaml  # Certificate for *.riotpiao.com (ingress-nginx namespace)
-  - ingress.yaml             # Ingress rules for all services (multiple namespaces)
+  - ingress-nginx-controller-alias.yaml  # Service alias for CoreDNS compatibility
+  - riotpiao-com-cert.yaml                # Certificate for *.riotpiao.com (ingress-nginx namespace)
+  - ingress.yaml                           # Ingress rules for all services (multiple namespaces)