Merge remote-tracking branch 'origin/master'

clusters/brusnika-prod/infrastructure/clusterissuer-letsencrypt.yaml

@@ -0,0 +1,20 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    email: emelin.d@sarex.io
+    privateKeySecretRef:
+      name: letsencrypt
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+      - selector:
+          dnsNames:
+            - zitadel.brusnika.onprem.sarex.io
+        http01:
+          ingress:
+            class: istio
+      - http01:
+          ingress:
+            class: nginx

clusters/brusnika-prod/infrastructure/kustomization.yaml

@@ -8,6 +8,7 @@ resources:
   - ../../../infrastructure/vault
   - ../../../infrastructure/zitadel
   - ./vault-ingress.yaml
+  - ./clusterissuer-letsencrypt.yaml
 patches:
   - path: ./patches/istio-gateway.yaml
     target:

clusters/brusnika-stage/infrastructure/clusterissuer-letsencrypt.yaml

@@ -0,0 +1,20 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt
+spec:
+  acme:
+    email: emelin.d@sarex.io
+    privateKeySecretRef:
+      name: letsencrypt
+    server: https://acme-v02.api.letsencrypt.org/directory
+    solvers:
+      - selector:
+          dnsNames:
+            - zitadel.test.sarex.brusnika.tech
+        http01:
+          ingress:
+            class: istio
+      - http01:
+          ingress:
+            class: nginx

clusters/brusnika-stage/infrastructure/kustomization.yaml

@@ -9,6 +9,7 @@ resources:
   - ../../../infrastructure/zitadel
   - ./lb-service-override.yaml
   - ./vault-ingress.yaml
+  - ./clusterissuer-letsencrypt.yaml
 patches:
   - path: ./patches/istio-gateway.yaml
     target:

clusters/brusnika-stage/infrastructure/patches/istio-config.yaml

@@ -294,6 +294,7 @@ spec:
                     - zitadel.test.sarex.brusnika.tech
                   tls:
                     credentialName: zitadel-tls
+                    
           virtualServices:
             camunda-identity-vs:
               namespace: camunda
@@ -462,6 +463,8 @@ spec:
                     prefix: /
                   service: nginx-service.global-ingress.svc.cluster.local
                   port: 80
+
+
             jupyter-vs:
               namespace: jupyter
               hosts:
@@ -498,6 +501,7 @@ spec:
                     prefix: /
                   service: kubernetes-dashboard-brusnika.kubernetes-dashboard.svc.cluster.local
                   port: 9090
+
             minio-vs:
               namespace: minio
               hosts:
@@ -516,6 +520,7 @@ spec:
                     prefix: /
                   service: minio-svc.minio.svc.cluster.local
                   port: 9000
+
             superset-vs:
               namespace: superset
               hosts:
@@ -534,6 +539,7 @@ spec:
                     prefix: /
                   service: superset.superset.svc.cluster.local
                   port: 8088
+
             vault-vs:
               namespace: vault
               hosts:
@@ -552,6 +558,7 @@ spec:
                     prefix: /
                   service: vault-vault-contour.vault.svc.cluster.local
                   port: 8200
+
             zitadel-vs:
               namespace: zitadel
               hosts:
@@ -563,3 +570,56 @@ spec:
                     prefix: /
                   service: zitadel-idp-contour.zitadel.svc.cluster.local
                   port: 8080
+
+            # ---- Migrated from ugok snapshot (batch 1) ----
+#            vs-bimv2-api:
+#              namespace: gateway
+#              hosts:
+#                - test.sarex.brusnika.tech
+#              gateways:
+#                - gateway/main-gateway
+#              routes:
+#                - match:
+#                    - uri:
+#                        prefix: /bimv2/api/
+#                  rewrite: /api/
+#                  service: backend-service.bim.svc.cluster.local
+#                  port: 8000
+#            # NOTE: contracts has no brusnika-stage deployment yet — service is a best-guess
+#            vs-contracts-api:
+#              namespace: gateway
+#              hosts:
+#                - test.sarex.brusnika.tech
+#              gateways:
+#                - gateway/main-gateway
+#              routes:
+#                - match:
+#                    - uri:
+#                        prefix: /contracts/api/
+#                  rewrite: /api/
+#                  service: backend-service.contracts.svc.cluster.local
+#                  port: 8000
+            vs-srx-admin-frontend:
+              namespace: gateway
+              hosts:
+                - test.sarex.brusnika.tech
+              gateways:
+                - gateway/main-gateway
+              routes:
+                - match:
+                    - uri:
+                        prefix: /control-interface/
+                  rewrite: /
+                  service: srx-admin-svc.django.svc.cluster.local
+                  port: 8080
+#            vs-gk:
+#              namespace: django
+#              hosts:
+#                - test.sarex.brusnika.tech
+#              gateways:
+#                - gateway/main-gateway
+#              routes:
+#                - path:
+#                    prefix: /
+#                  service: gatekeeper-service
+#                  port: 80

clusters/brusnika-stage/kustomization.yaml

@@ -4,7 +4,7 @@ resources:
   - ./flux-system
   - ./helm-repositories.yaml
   - ./infrastructure
-  - ./test-service.yaml
+
   - ../../apps/mapper/brusnika-stage
   - ../../apps/control-interface/brusnika-stage
   - ../../apps/django/brusnika-stage