From b8225145328eaa825906fd0783218a5afc18767a Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Thu, 1 Jan 2026 10:59:45 +0900
Subject: [PATCH] REFACTOR(traefik): use Certificate resource instead of
 Ingress

- Remove conflicting Ingress that was also routing to crafty
- Use cert-manager Certificate directly for TLS cert issuance
- Only IngressRoute handles routing to backend
---
 crafty/ingress.yaml | 30 ++++++++----------------------
 1 file changed, 8 insertions(+), 22 deletions(-)

diff --git a/crafty/ingress.yaml b/crafty/ingress.yaml
index 02d9c35..0362a75 100644
--- a/crafty/ingress.yaml
+++ b/crafty/ingress.yaml
@@ -3,8 +3,6 @@ kind: IngressRoute
 metadata:
   name: crafty-ingress
   namespace: crafty
-  annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
   entryPoints:
     - websecure
@@ -19,27 +17,15 @@ spec:
   tls:
     secretName: crafty-tls
 ---
-apiVersion: networking.k8s.io/v1
-kind: Ingress
+apiVersion: cert-manager.io/v1
+kind: Certificate
 metadata:
-  name: crafty-tls-cert
+  name: crafty-tls
   namespace: crafty
-  annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
 spec:
-  ingressClassName: traefik
-  tls:
-  - hosts:
+  secretName: crafty-tls
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer
+  dnsNames:
     - crafty0213.kro.kr
-    secretName: crafty-tls
-  rules:
-  - host: crafty0213.kro.kr
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: crafty
-            port:
-              number: 8443