From 7f37211a8b1443b727ac911a1fc515e78588d22f Mon Sep 17 00:00:00 2001
From: Hermes Agent service account
 <hermes@carousel-of-progress.local.mk-labs.cloud>
Date: Thu, 4 Jun 2026 22:05:55 -0500
Subject: [PATCH] fix(harbor): switch from Gateway API to nginx-ingress

- Change expose.type from clusterIP to ingress
- Use nginx IngressClass
- Reference harbor-tls certificate secret
- Add staging cert-manager annotation
- Gateway API was returning intermittent 503 errors for static assets
---
 cluster/platform/harbor/values.yaml | 25 ++++++++++++++++---------
 1 file changed, 16 insertions(+), 9 deletions(-)

diff --git a/cluster/platform/harbor/values.yaml b/cluster/platform/harbor/values.yaml
index 8598684..346312b 100644
--- a/cluster/platform/harbor/values.yaml
+++ b/cluster/platform/harbor/values.yaml
@@ -7,17 +7,24 @@
 # External URL for Harbor - primary DNS name
 externalURL: https://the-seas.local.mk-labs.cloud
 
-# Expose Harbor via ClusterIP (Gateway API handles ingress)
-# TLS termination handled by Gateway API, not Harbor
+# Expose Harbor via Ingress (nginx-ingress controller)
 expose:
-  type: clusterIP
+  type: ingress
   tls:
-    enabled: false
-  clusterIP:
-    name: the-seas
-    ports:
-      httpPort: 80
-      httpsPort: 443
+    enabled: true
+    certSource: secret
+    secret:
+      secretName: harbor-tls
+      notarySecretName: harbor-tls
+  ingress:
+    hosts:
+      core: the-seas.local.mk-labs.cloud
+      notary: notary-the-seas.local.mk-labs.cloud
+    className: nginx
+    annotations:
+      cert-manager.io/cluster-issuer: letsencrypt-staging
+      nginx.ingress.kubernetes.io/ssl-redirect: "true"
+      nginx.ingress.kubernetes.io/proxy-body-size: "0"
 
 # Admin credentials from ExternalSecret
 harborAdminPassword: ""