clusters/brusnika-prod/infrastructure/clusterissuer-letsencrypt.yaml

@@ -1,20 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt
-spec:
-  acme:
-    email: emelin.d@sarex.io
-    privateKeySecretRef:
-      name: letsencrypt
-    server: https://acme-v02.api.letsencrypt.org/directory
-    solvers:
-      - selector:
-          dnsNames:
-            - zitadel.brusnika.onprem.sarex.io
-        http01:
-          ingress:
-            class: istio
-      - http01:
-          ingress:
-            class: nginx

clusters/brusnika-prod/infrastructure/kustomization.yaml

@@ -8,7 +8,6 @@ resources:
   - ../../../infrastructure/vault
   - ../../../infrastructure/zitadel
   - ./vault-ingress.yaml
-  - ./clusterissuer-letsencrypt.yaml
 patches:
   - path: ./patches/istio-gateway.yaml
     target:

clusters/brusnika-stage/infrastructure/clusterissuer-letsencrypt.yaml

@@ -1,20 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt
-spec:
-  acme:
-    email: emelin.d@sarex.io
-    privateKeySecretRef:
-      name: letsencrypt
-    server: https://acme-v02.api.letsencrypt.org/directory
-    solvers:
-      - selector:
-          dnsNames:
-            - zitadel.test.sarex.brusnika.tech
-        http01:
-          ingress:
-            class: istio
-      - http01:
-          ingress:
-            class: nginx

clusters/brusnika-stage/infrastructure/kustomization.yaml

@@ -9,7 +9,6 @@ resources:
   - ../../../infrastructure/zitadel
   - ./lb-service-override.yaml
   - ./vault-ingress.yaml
-  - ./clusterissuer-letsencrypt.yaml
 patches:
   - path: ./patches/istio-gateway.yaml
     target:

clusters/brusnika-stage/infrastructure/patches/istio-config.yaml

@@ -294,7 +294,6 @@ spec:
                     - zitadel.test.sarex.brusnika.tech
                   tls:
                     credentialName: zitadel-tls
-                    
           virtualServices:
             camunda-identity-vs:
               namespace: camunda
@@ -463,8 +462,6 @@ spec:
                     prefix: /
                   service: nginx-service.global-ingress.svc.cluster.local
                   port: 80
-
-
             jupyter-vs:
               namespace: jupyter
               hosts:
@@ -501,7 +498,6 @@ spec:
                     prefix: /
                   service: kubernetes-dashboard-brusnika.kubernetes-dashboard.svc.cluster.local
                   port: 9090
-
             minio-vs:
               namespace: minio
               hosts:
@@ -520,7 +516,6 @@ spec:
                     prefix: /
                   service: minio-svc.minio.svc.cluster.local
                   port: 9000
-
             superset-vs:
               namespace: superset
               hosts:
@@ -539,7 +534,6 @@ spec:
                     prefix: /
                   service: superset.superset.svc.cluster.local
                   port: 8088
-
             vault-vs:
               namespace: vault
               hosts:
@@ -558,7 +552,6 @@ spec:
                     prefix: /
                   service: vault-vault-contour.vault.svc.cluster.local
                   port: 8200
-
             zitadel-vs:
               namespace: zitadel
               hosts:
@@ -570,56 +563,3 @@ spec:
                     prefix: /
                   service: zitadel-idp-contour.zitadel.svc.cluster.local
                   port: 8080
-
-            # ---- Migrated from ugok snapshot (batch 1) ----
-#            vs-bimv2-api:
-#              namespace: gateway
-#              hosts:
-#                - test.sarex.brusnika.tech
-#              gateways:
-#                - gateway/main-gateway
-#              routes:
-#                - match:
-#                    - uri:
-#                        prefix: /bimv2/api/
-#                  rewrite: /api/
-#                  service: backend-service.bim.svc.cluster.local
-#                  port: 8000
-#            # NOTE: contracts has no brusnika-stage deployment yet — service is a best-guess
-#            vs-contracts-api:
-#              namespace: gateway
-#              hosts:
-#                - test.sarex.brusnika.tech
-#              gateways:
-#                - gateway/main-gateway
-#              routes:
-#                - match:
-#                    - uri:
-#                        prefix: /contracts/api/
-#                  rewrite: /api/
-#                  service: backend-service.contracts.svc.cluster.local
-#                  port: 8000
-            vs-srx-admin-frontend:
-              namespace: gateway
-              hosts:
-                - test.sarex.brusnika.tech
-              gateways:
-                - gateway/main-gateway
-              routes:
-                - match:
-                    - uri:
-                        prefix: /control-interface/
-                  rewrite: /
-                  service: srx-admin-svc.django.svc.cluster.local
-                  port: 8080
-#            vs-gk:
-#              namespace: django
-#              hosts:
-#                - test.sarex.brusnika.tech
-#              gateways:
-#                - gateway/main-gateway
-#              routes:
-#                - path:
-#                    prefix: /
-#                  service: gatekeeper-service
-#                  port: 80

clusters/brusnika-stage/kustomization.yaml

@@ -4,7 +4,7 @@ resources:
   - ./flux-system
   - ./helm-repositories.yaml
   - ./infrastructure
-
+  - ./test-service.yaml
   - ../../apps/mapper/brusnika-stage
   - ../../apps/control-interface/brusnika-stage
   - ../../apps/django/brusnika-stage