REFACTOR(traefik): use Certificate resource instead of Ingress

- Remove conflicting Ingress that was also routing to crafty
- Use cert-manager Certificate directly for TLS cert issuance
- Only IngressRoute handles routing to backend

crafty/ingress.yaml

@@ -3,8 +3,6 @@ kind: IngressRoute
 metadata:
   name: crafty-ingress
   namespace: crafty
-  annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   entryPoints:
     - websecure
@@ -19,27 +17,15 @@ spec:
   tls:
     secretName: crafty-tls
 ---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
+apiVersion: cert-manager.io/v1
+kind: Certificate
 metadata:
-  name: crafty-tls-cert
+  name: crafty-tls
   namespace: crafty
-  annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
-  ingressClassName: traefik
-  tls:
-  - hosts:
+  secretName: crafty-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
     - crafty0213.kro.kr
-    secretName: crafty-tls
-  rules:
-  - host: crafty0213.kro.kr
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: crafty
-            port:
-              number: 8443