feat: Updated for api ingress routes

2026-07-31 11:21:15 +01:00
parent 8528f14ed7
commit e6fe463216
6 changed files with 95 additions and 65 deletions
@@ -76,6 +76,20 @@ jobs:
                    --set ingress.tls.certResolver=letsencrypt \
                    --set server.env.grpcHost=agents.example.com:443 > /dev/null

+            # The shape the cloud deployment actually uses: a wildcard tenant
+            # namespace, /api and /auth routed at the edge, and no apex — that
+            # belongs to the marketing site, which this chart does not deploy.
+            - name: Render a wildcard host with edge-routed API paths
+              run: |
+                  helm template test "$CHART_DIR" \
+                    --set ingress.enabled=true \
+                    --set 'ingress.web.host=*.vantage.example.com' \
+                    --set ingress.api.enabled=true \
+                    --set ingress.grpc.host=agents.example.com \
+                    --set server.env.grpcHost=agents.example.com:443 \
+                    --set ingress.tls.secretName=vantage-tls \
+                    --set ingress.tls.grpcSecretName=agents-tls > /dev/null
+
            # The guards are load-bearing, so their absence is a regression the
            # same way a broken render is. Each of these must fail.
            - name: Check the guards still refuse bad values
@@ -99,6 +113,12 @@ jobs:
                      --set server.replicaCount=2 --set server.persistence.enabled=true
                  refuses "ingress with no web host" \
                      --set ingress.enabled=true
+                  refuses "edge-routed API with an empty path list" \
+                      --set ingress.enabled=true \
+                      --set ingress.web.host=vantage.example.com \
+                      --set ingress.grpc.enabled=false \
+                      --set ingress.api.enabled=true \
+                      --set 'ingress.api.paths=null'
                  refuses "gRPC ingress with no host" \
                      --set ingress.enabled=true \
                      --set ingress.web.host=vantage.example.com \