From fc34833472f36eb5dd27e2269ea5695c094b9714 Mon Sep 17 00:00:00 2001
From: Hermes Agent service account
 <hermes@carousel-of-progress.local.mk-labs.cloud>
Date: Thu, 4 Jun 2026 22:39:18 -0500
Subject: [PATCH] Consolidate Harbor TLS certificates into single multi-SAN
 certificate

- Merge harbor-alt-tls into harbor-tls certificate
- Single certificate now covers both DNS names:
  - the-seas.local.mk-labs.cloud (EPCOT theme)
  - harbor.local.mk-labs.cloud (functional name)
- Remove duplicate certificate-alt.yaml
- Reduces cert-manager overhead and simplifies certificate management
---
 cluster/platform/harbor/certificate-alt.yaml | 16 ----------------
 cluster/platform/harbor/certificate.yaml     |  3 ++-
 2 files changed, 2 insertions(+), 17 deletions(-)
 delete mode 100644 cluster/platform/harbor/certificate-alt.yaml

diff --git a/cluster/platform/harbor/certificate-alt.yaml b/cluster/platform/harbor/certificate-alt.yaml
deleted file mode 100644
index 4c281b0..0000000
--- a/cluster/platform/harbor/certificate-alt.yaml
+++ /dev/null
@@ -1,16 +0,0 @@
-# ------------------------------------------------------------------------------
-# Certificate — Harbor Alternate TLS Certificate (staging until stable)
-# Alternate DNS: harbor.local.mk-labs.cloud
-# ------------------------------------------------------------------------------
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: harbor-alt-tls
-  namespace: harbor
-spec:
-  secretName: harbor-alt-tls
-  issuerRef:
-    name: letsencrypt-staging
-    kind: ClusterIssuer
-  dnsNames:
-    - harbor.local.mk-labs.cloud
diff --git a/cluster/platform/harbor/certificate.yaml b/cluster/platform/harbor/certificate.yaml
index 25be76c..66798ee 100644
--- a/cluster/platform/harbor/certificate.yaml
+++ b/cluster/platform/harbor/certificate.yaml
@@ -1,6 +1,6 @@
 # ------------------------------------------------------------------------------
 # Certificate — Harbor TLS Certificate (staging until stable)
-# Primary DNS: the-seas.local.mk-labs.cloud
+# DNS Names: the-seas.local.mk-labs.cloud, harbor.local.mk-labs.cloud
 # ------------------------------------------------------------------------------
 apiVersion: cert-manager.io/v1
 kind: Certificate
@@ -14,3 +14,4 @@ spec:
     kind: ClusterIssuer
   dnsNames:
     - the-seas.local.mk-labs.cloud
+    - harbor.local.mk-labs.cloud