fix: correct Pingora upstream ports and kustomize namespace conflict

pingora-config.yaml: kratos-public and people-backend K8s Services
expose port 80, not 4433/8000. The wrong ports caused Pingora to
return timeouts for /kratos/* and all people.* routes.

ory/kustomization.yaml: remove kustomization-level namespace: ory
transformer. All non-Helm resources already declare namespace: ory
explicitly. The transformer was incorrectly moving hydra-maester's
enabledNamespaces Role (generated for the lasuite namespace) into ory,
producing a duplicate-name conflict during kustomize build.
This commit is contained in:
2026-03-03 00:57:58 +00:00
parent 3ecb42056f
commit 8621c0dd65
2 changed files with 7 additions and 3 deletions

View File

@@ -1,7 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: ory
# namespace: ory removed — all non-Helm resources already set namespace: ory
# explicitly, and the Helm charts use namespace: ory in their helmCharts spec.
# The kustomization-level transformer was incorrectly moving hydra-maester's
# enabledNamespaces Role (meant for lasuite) into the ory namespace, causing
# a duplicate-name conflict.
resources:
- namespace.yaml