From 6cb70ce523051ef6948978c7502a2f887c22f4c0 Mon Sep 17 00:00:00 2001
From: fchinembiri <fchinembiri24@gmail.com>
Date: Tue, 19 May 2026 17:11:42 +0200
Subject: [PATCH] fix(k8s): manually configure ingresses for supabase basket

---
 k8s/base/kustomization.yaml           |  1 +
 k8s/base/supabase-basket-ingress.yaml | 50 +++++++++++++++++++++++++++
 k8s/base/supabase-basket.yaml         |  4 +--
 3 files changed, 53 insertions(+), 2 deletions(-)
 create mode 100644 k8s/base/supabase-basket-ingress.yaml

diff --git a/k8s/base/kustomization.yaml b/k8s/base/kustomization.yaml
index b0ad424..fbbf4a7 100644
--- a/k8s/base/kustomization.yaml
+++ b/k8s/base/kustomization.yaml
@@ -22,6 +22,7 @@ resources:
 - ntfy.yaml
 - supabase-basket-namespace.yaml
 - supabase-basket.yaml
+- supabase-basket-ingress.yaml
 images:
 - name: frankchine/geocrop-api
   newName: frankchine/geocrop-api
diff --git a/k8s/base/supabase-basket-ingress.yaml b/k8s/base/supabase-basket-ingress.yaml
new file mode 100644
index 0000000..991b353
--- /dev/null
+++ b/k8s/base/supabase-basket-ingress.yaml
@@ -0,0 +1,50 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: supabase-basket-kong-ingress
+  namespace: geocrop
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    nginx.ingress.kubernetes.io/proxy-body-size: "500m"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - basket.techarvest.co.zw
+    secretName: supabase-basket-tls
+  rules:
+  - host: basket.techarvest.co.zw
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: supabase-basket-supabase-kong
+            port:
+              number: 8000
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: supabase-basket-studio-ingress
+  namespace: geocrop
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  ingressClassName: nginx
+  tls:
+  - hosts:
+    - studio.basket.techarvest.co.zw
+    secretName: supabase-basket-studio-tls
+  rules:
+  - host: studio.basket.techarvest.co.zw
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: supabase-basket-supabase-studio
+            port:
+              number: 3000
diff --git a/k8s/base/supabase-basket.yaml b/k8s/base/supabase-basket.yaml
index c107548..d5b5b32 100644
--- a/k8s/base/supabase-basket.yaml
+++ b/k8s/base/supabase-basket.yaml
@@ -210,7 +210,7 @@ metadata:
 type: Opaque
 data:
   anonKey: "ZXlKaGJHY2lPaUpJVXpJMU5pSXNJblI1Y0NJNklrcFhWQ0o5LmV5QWdDaUFnSUNBaWNtOXNaU0k2SUNKaGJtOXVJaXdLSUNBZ0lDSnBjM01pT2lBaWMzVndZV0poYzJVdFpHVnRieUlzQ2lBZ0lDQWlhV0YwSWpvZ01UWTBNVGMyT1RJd01Dd0tJQ0FnSUNKbGVIQWlPaUF4TnprNU5UTTFOakF3Q24wLmRjX1g1aVJfVlBfcVQwenNpeWpfSV9PWjJUOUZ0UlUyQkJOV044QnU0R0U="
-  serviceKey: "ZXlKaGJHY2lPaUpJVXpJMU5pSXNJblI1Y0NJNklrcFhWQ0o5LmV5QWdDaUFnSUNBaWNtOXNaU0k2SUNKelpYSjJhV05sWDNKdmJHVWlMQW9nSUNBZ0ltbHpjeUk2SUNKemRYQmhZbUZ6WlMxa1pXMXZJaXdLSUNBZ0lDSnBZWFFpT2lBeE5qUXhOelk1TWpBd0xBb2dJQ0FnSW1WNGNDSTZJREUzT1RrMU16VTJNREFLZlEuRGFZbE5Fb1VyckVuMklnN3RxaWJTLVBISzV2Z3VzYmNibzdYMzZYVnQ0UQ=="
+  serviceKey: "ZXlKaGJHY2lPaUpJVXpJMU5pSXNJblI1Y0NJNklrcFhWQ0o5LmV5QWdDaUFnSUNBaWNtOXNaU0k2SUNKelpYSjJhV05sWDNKdmJHVWlMQW9nSUNBZ0ltbHpjeUk2SUNKemRYQmhZbUZ6WlMxa1pXMXZJaXdLSUNBZ0lDSnBZWFFpT2lBeE5qUXhOelk1TWpBd0xBb2dJQ0FnSW1WNGNDSTZBeE56azVOVE0xTmpBd0NuMC5EYVlsTkVvVXJyRW4ySWc3dHFpYlMtUEhLNXZndXNiY2JvN1gzNlhWdDRR"
   secret: "eW91ci1zdXBlci1zZWNyZXQtand0LXRva2VuLXdpdGgtYXQtbGVhc3QtMzItY2hhcmFjdGVycy1sb25n"
 ---
 # Source: supabase/templates/secret/meta.yaml
@@ -1407,7 +1407,7 @@ metadata:
 subjects:
   - kind: ServiceAccount
     name: supabase-basket-supabase-vector
-    namespace: supabase-basket
+    namespace: geocrop
 roleRef:
   kind: ClusterRole
   name: supabase-basket-reader