feat(artifactapi): migrate Ingress to Gateway API (#129)

## Summary

- Replace `Ingress` (nginx) with `Gateway` + `HTTPRoute` using `traefik-internal` GatewayClass
- TLS terminated at the Gateway listener; cert-manager provisions the certificate via `vault-issuer`
- external-dns annotations moved to the Gateway

## Notes

The original Ingress had nginx-specific annotations (`proxy-body-size: 10g`, `proxy-read-timeout: 600`) which are not portable to Gateway API. These can be re-introduced via a Traefik `Middleware` CRD if needed.

## Test plan

- [ ] ArgoCD syncs the app cleanly
- [ ] cert-manager issues the `artifactapi-tls` certificate
- [ ] external-dns creates the DNS record
- [ ] `https://artifactapi.k8s.syd1.au.unkin.net` is reachable

Reviewed-on: #129

This commit was merged in pull request #129.

This commit is contained in:

Ben Vincent

2026-05-23 16:06:33 +10:00

parent 90ddd932fe

commit c2637da068

4 changed files with 51 additions and 33 deletions

									
										apps/base/artifactapi/kustomization.yaml
									
		+2
		-1
	
												View File
												
				@@ -6,7 +6,8 @@ resources:

				  - artifactapi-deployment.yaml

				  - artifactapi-hpa.yaml

				  - configmap.yaml

				  - ingress.yaml

				  - gateway.yaml

				  - httproute.yaml

				  - namespace.yaml

				  - postgres-deployment.yaml

				  - pvc.yaml