From 86dca247b2d947880ea294825b003f6491b5dc1f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=EB=B0=95=ED=83=9C=EC=88=98=20=28PARK=20TASOO=29?=
 <tasoo1118@gmail.com>
Date: Sun, 30 Aug 2026 22:58:01 +0900
Subject: [PATCH] fix(infra): restore production admin api ingress (#3721)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

### Description

Gateway 전환 중 admin API 외부 경로가 중단되지 않도록 production overlay에 Ingress를
복구합니다.

### Additional context

HTTPRoute는 유지하며 production과 stage overlay 렌더링을 확인했습니다.

---

### Before submitting the PR, please make sure you do the following

- [x] Read the [Contributing
Guidelines](https://github.com/skkuding/next/blob/main/CONTRIBUTING.md)
- [x] Read the [Contributing
Guidelines](https://github.com/skkuding/next/blob/main/CONTRIBUTING.md#pr-and-branch)
and follow the [Commit
Convention](https://github.com/skkuding/next/blob/main/CONTRIBUTING.md#commit-convention)
- [x] Provide a description in this PR that addresses **what** this PR
is solving.
- [x] Render the affected production and stage overlays.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
  * Added secure HTTPS routing for the production admin API.
  * Enabled access through the `/graphql` and `/admin-api` paths.
  * Added automatic TLS certificate management for `codedang.com`.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---
 .../overlays/production/ingress.yaml          | 32 +++++++++++++++++++
 .../overlays/production/kustomization.yaml    |  1 +
 2 files changed, 33 insertions(+)
 create mode 100644 infra/k8s/admin-api/overlays/production/ingress.yaml

diff --git a/infra/k8s/admin-api/overlays/production/ingress.yaml b/infra/k8s/admin-api/overlays/production/ingress.yaml
new file mode 100644
index 0000000000..b88dfd536a
--- /dev/null
+++ b/infra/k8s/admin-api/overlays/production/ingress.yaml
@@ -0,0 +1,32 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: admin-api-server-ingress
+  namespace: admin-api
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-dns01
+    traefik.ingress.kubernetes.io/redirect-entry-point: https
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts:
+        - codedang.com
+      secretName: admin-api-server-tls
+  rules:
+    - host: codedang.com
+      http:
+        paths:
+          - path: /graphql
+            pathType: Prefix
+            backend:
+              service:
+                name: admin-api-server
+                port:
+                  number: 3000
+          - path: /admin-api
+            pathType: Prefix
+            backend:
+              service:
+                name: admin-api-server
+                port:
+                  number: 3000
diff --git a/infra/k8s/admin-api/overlays/production/kustomization.yaml b/infra/k8s/admin-api/overlays/production/kustomization.yaml
index 4a70242f47..2bea92be05 100644
--- a/infra/k8s/admin-api/overlays/production/kustomization.yaml
+++ b/infra/k8s/admin-api/overlays/production/kustomization.yaml
@@ -4,6 +4,7 @@ namespace: admin-api
 
 resources:
   - ../../base
+  - ingress.yaml
   - secrets/aws-credentials.yaml
   - secrets/database-credentials.yaml
   - secrets/security-keys.yaml