Initial commit - production deployment

infrastructure/platform/networking/ingress/base/ingress.yaml

@@ -0,0 +1,58 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: bakery-ingress
+  namespace: bakery-ia
+  labels:
+    app.kubernetes.io/name: bakery-ia
+    app.kubernetes.io/component: ingress
+  annotations:
+    # Nginx ingress controller annotations
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: "500m"
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: "600"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
+    # SSE and WebSocket configuration for long-lived connections
+    nginx.ingress.kubernetes.io/proxy-buffering: "off"
+    nginx.ingress.kubernetes.io/proxy-http-version: "1.1"
+    nginx.ingress.kubernetes.io/upstream-keepalive-timeout: "3600"
+    # WebSocket upgrade support
+    nginx.ingress.kubernetes.io/websocket-services: "gateway-service"
+    # CORS configuration
+    nginx.ingress.kubernetes.io/enable-cors: "true"
+    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, PUT, DELETE, OPTIONS, PATCH"
+    nginx.ingress.kubernetes.io/cors-allow-headers: "Content-Type, Authorization, X-Requested-With, Accept, Origin, Cache-Control"
+    nginx.ingress.kubernetes.io/cors-allow-credentials: "true"
+
+
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - DOMAIN_PLACEHOLDER  # To be replaced by kustomize
+    secretName: TLS_SECRET_PLACEHOLDER  # To be replaced by kustomize
+  rules:
+  # Main application routes
+  - host: DOMAIN_PLACEHOLDER  # To be replaced by kustomize
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: frontend-service
+            port:
+              number: 3000
+      - path: /api
+        pathType: Prefix
+        backend:
+          service:
+            name: gateway-service
+            port:
+              number: 8000
+  # NOTE: Gitea and Registry ingresses are managed by Gitea Helm chart
+  # See infrastructure/cicd/gitea/values.yaml for ingress configuration
+  # NOTE: Mail ingress is deployed separately via mailu-helm resource
+  # to avoid 503 errors when Mailu is not running

infrastructure/platform/networking/ingress/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ingress.yaml