feat(deploy) : serve sudloh.com alongside guide.sudloh.com

k8s/base/ci-rbac.yaml

@@ -14,6 +14,10 @@ metadata:
     app.kubernetes.io/name: buzz-sheet
     app.kubernetes.io/component: ci
 rules:
+  - apiGroups: ["networking.k8s.io"]
+    resources: ["ingresses"]
+    resourceNames: ["buzz-sheet"]
+    verbs: ["get", "patch", "update"]
   - apiGroups: [""]
     resources: ["configmaps"]
     resourceNames: ["buzz-sheet-config"]

k8s/base/configmap.yaml

@@ -7,6 +7,7 @@ metadata:
 data:
   BASE_URL: https://guide.sudloh.com
   BETTER_AUTH_URL: https://guide.sudloh.com
+  BETTER_AUTH_TRUSTED_ORIGINS: https://guide.sudloh.com,https://sudloh.com
   # Traefik supplies X-Forwarded-For and does not trust incoming forwarded headers.
   # The network policy allows only Traefik to reach the app.
   TRUSTED_CLIENT_IP_HEADER: x-forwarded-for

k8s/base/ingress.yaml

@@ -9,6 +9,16 @@ metadata:
 spec:
   ingressClassName: traefik
   rules:
+    - host: sudloh.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: buzz-sheet
+                port:
+                  number: 3000
     - host: guide.sudloh.com
       http:
         paths: