Add new infra architecture 8

infrastructure/platform/networking/ingress/overlays/dev/gitea-service.yaml

@@ -1,3 +1,8 @@
+---
+# Service to route traffic from bakery-ia namespace to Gitea in gitea namespace
+# Using ExternalName pointing to the headless service FQDN
+# The ingress controller can resolve headless services via DNS (returns pod IPs)
+# NOTE: Gitea's container registry is served on port 3000 (same as HTTP) at /v2/ path
 apiVersion: v1
 kind: Service
 metadata:
@@ -5,7 +10,9 @@ metadata:
   namespace: bakery-ia
 spec:
   type: ExternalName
+  # Use the headless service DNS name - nginx ingress resolves this to pod IPs
   externalName: gitea-http.gitea.svc.cluster.local
   ports:
-    - port: 3000
+    - name: http
+      port: 3000
       targetPort: 3000

infrastructure/platform/networking/ingress/overlays/dev/kustomization.yaml

@@ -20,7 +20,10 @@ patches:
         value: gitea.bakery-ia.local
       - op: replace
         path: /spec/tls/0/hosts/2
-        value: mail.bakery-ia.local
+        value: registry.bakery-ia.local
+      - op: replace
+        path: /spec/tls/0/hosts/3
+        value: mail.bakery-ia.dev
       - op: replace
         path: /spec/tls/0/secretName
         value: bakery-dev-tls-cert
@@ -32,7 +35,10 @@ patches:
         value: gitea.bakery-ia.local
       - op: replace
         path: /spec/rules/2/host
-        value: mail.bakery-ia.local
+        value: registry.bakery-ia.local
+      - op: replace
+        path: /spec/rules/3/host
+        value: mail.bakery-ia.dev
       - op: replace
         path: /metadata/annotations/nginx.ingress.kubernetes.io~1cors-allow-origin
-        value: "https://localhost,https://localhost:3000,https://localhost:3001,https://127.0.0.1,https://127.0.0.1:3000,https://127.0.0.1:3001,https://bakery-ia.local,http://localhost,http://localhost:3000,http://localhost:3001,http://127.0.0.1,http://127.0.0.1:3000"
+        value: "https://localhost,https://localhost:3000,https://localhost:3001,https://127.0.0.1,https://127.0.0.1:3000,https://127.0.0.1:3001,https://bakery-ia.local,https://registry.bakery-ia.local,https://gitea.bakery-ia.local,http://localhost,http://localhost:3000,http://localhost:3001,http://127.0.0.1,http://127.0.0.1:3000"