Add new infra architecture 11

infrastructure/platform/networking/ingress/overlays/dev/gitea-service.yaml

@@ -1,18 +0,0 @@
----
-# Service to route traffic from bakery-ia namespace to Gitea in gitea namespace
-# Using ExternalName pointing to the headless service FQDN
-# The ingress controller can resolve headless services via DNS (returns pod IPs)
-# NOTE: Gitea's container registry is served on port 3000 (same as HTTP) at /v2/ path
-apiVersion: v1
-kind: Service
-metadata:
-  name: gitea-http
-  namespace: bakery-ia
-spec:
-  type: ExternalName
-  # Use the headless service DNS name - nginx ingress resolves this to pod IPs
-  externalName: gitea-http.gitea.svc.cluster.local
-  ports:
-    - name: http
-      port: 3000
-      targetPort: 3000

infrastructure/platform/networking/ingress/overlays/dev/kustomization.yaml

@@ -3,7 +3,6 @@ kind: Kustomization
 
 resources:
   - ../../base
-  - gitea-service.yaml
 
 namePrefix: dev-
 
@@ -15,30 +14,14 @@ patches:
       - op: replace
         path: /spec/tls/0/hosts/0
         value: bakery-ia.local
-      - op: replace
-        path: /spec/tls/0/hosts/1
-        value: gitea.bakery-ia.local
-      - op: replace
-        path: /spec/tls/0/hosts/2
-        value: registry.bakery-ia.local
-      - op: replace
-        path: /spec/tls/0/hosts/3
-        value: mail.bakery-ia.dev
       - op: replace
         path: /spec/tls/0/secretName
         value: bakery-dev-tls-cert
       - op: replace
         path: /spec/rules/0/host
         value: bakery-ia.local
-      - op: replace
-        path: /spec/rules/1/host
-        value: gitea.bakery-ia.local
-      - op: replace
-        path: /spec/rules/2/host
-        value: registry.bakery-ia.local
-      - op: replace
-        path: /spec/rules/3/host
-        value: mail.bakery-ia.dev
       - op: replace
         path: /metadata/annotations/nginx.ingress.kubernetes.io~1cors-allow-origin
         value: "https://localhost,https://localhost:3000,https://localhost:3001,https://127.0.0.1,https://127.0.0.1:3000,https://127.0.0.1:3001,https://bakery-ia.local,https://registry.bakery-ia.local,https://gitea.bakery-ia.local,http://localhost,http://localhost:3000,http://localhost:3001,http://127.0.0.1,http://127.0.0.1:3000"
+# NOTE: Gitea and Registry ingresses are managed by Gitea Helm chart (infrastructure/cicd/gitea/values.yaml)
+# NOTE: Mail ingress (mail.bakery-ia.dev) is deployed separately via mailu-helm Tilt resource

infrastructure/platform/networking/ingress/overlays/prod/gitea-service.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: gitea-http
-  namespace: bakery-ia
-spec:
-  type: ExternalName
-  externalName: gitea-http.gitea.svc.cluster.local
-  ports:
-    - port: 3000
-      targetPort: 3000