From 5b6d966b6be60253445f83367771f4f145301237 Mon Sep 17 00:00:00 2001
From: Ben Vincent <neotheo@gmail.com>
Date: Wed, 5 Aug 2026 22:19:33 +1000
Subject: [PATCH] artifactapi: serve plain HTTP without HTTPS redirect

Early-boot clients (anaconda/kickstart, yum in %post, PXE environments)
need direct HTTP access to the rpm repos. A 301 redirect to HTTPS breaks
or downgrades those clients.

- Attach the api-route HTTPRoute to the Gateway's http listener alongside https
- Remove the http-redirect RequestRedirect (301) route so port 80 serves content directly

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
---
 apps/base/artifactapi/httproute.yaml | 30 ++++++----------------------
 1 file changed, 6 insertions(+), 24 deletions(-)

diff --git a/apps/base/artifactapi/httproute.yaml b/apps/base/artifactapi/httproute.yaml
index a81ebe3..775e004 100644
--- a/apps/base/artifactapi/httproute.yaml
+++ b/apps/base/artifactapi/httproute.yaml
@@ -1,30 +1,6 @@
 ---
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
-metadata:
-  name: http-redirect
-  namespace: artifactapi
-spec:
-  hostnames:
-    - artifactapi.k8s.syd1.au.unkin.net
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: artifactapi
-      sectionName: http
-  rules:
-    - filters:
-        - type: RequestRedirect
-          requestRedirect:
-            scheme: https
-            statusCode: 301
-      matches:
-        - path:
-            type: PathPrefix
-            value: /
----
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
 metadata:
   name: api-route
   namespace: artifactapi
@@ -32,6 +8,12 @@ spec:
   hostnames:
     - artifactapi.k8s.syd1.au.unkin.net
   parentRefs:
+    # Early-boot clients (anaconda/kickstart, yum in %post, PXE) need plain HTTP
+    # for the rpm repos; serve the app directly on port 80 instead of redirecting.
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: artifactapi
+      sectionName: http
     - group: gateway.networking.k8s.io
       kind: Gateway
       name: artifactapi
-- 
2.47.3