fix(k8s): standardize ingress TLDs - beta=.penguintech.cloud, alpha=.localhost.local

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: PenguinzTech

k8s/helm/icecharts/values-alpha.yaml

@@ -1,7 +1,7 @@
 ## IceCharts - Alpha Environment Overrides
 namespace:
   create: true
-  name: icecharts-alpha
+  name: icecharts
 api:
   replicas: 1
   image:

k8s/helm/icecharts/values-beta.yaml

@@ -1,4 +1,4 @@
-# Beta/staging environment overrides (icecharts.penguintech.io)
+# Beta/staging environment overrides (icecharts.penguintech.cloud)
 # Uses icecharts namespace (each cluster has its own icecharts namespace)
 namespace:
   create: false
@@ -23,11 +23,11 @@ web:
     tag: "beta"
 
 ingress:
-  # Disabled: ingress for icecharts.penguintech.io is managed in the
+  # Disabled: ingress for icecharts.penguintech.cloud is managed in the
   # icecharts namespace (created via kustomize). The nginx admission
   # webhook rejects duplicate host+path across namespaces.
   enabled: false
-  host: icecharts.penguintech.io
+  host: icecharts.penguintech.cloud
   tls:
     enabled: true
     secretName: icecharts-tls
@@ -57,4 +57,4 @@ config:
   FLASK_ENV: "production"
   LOG_LEVEL: "info"
   RELEASE_MODE: "false"
-  CORS_ORIGINS: "https://icecharts.penguintech.io"
+  CORS_ORIGINS: "https://icecharts.penguintech.cloud"

k8s/kustomize/base/configmap.yaml

@@ -16,7 +16,7 @@ data:
   STORAGE_PROVIDER: "minio"
   MINIO_BUCKET: "icecharts"
   MINIO_SECURE: "false"
-  CORS_ORIGINS: "https://icecharts.penguintech.io"
+  CORS_ORIGINS: "https://icecharts.penguintech.cloud"
   LICENSE_SERVER_URL: "https://license.penguintech.io"
   PRODUCT_NAME: "icecharts"
   RELEASE_MODE: "false"

k8s/kustomize/overlays/alpha/configmap-patch.yaml

@@ -6,7 +6,7 @@ data:
   FLASK_ENV: "production"
   LOG_LEVEL: "debug"
   RELEASE_MODE: "false"
-  CORS_ORIGINS: "https://icecharts-alpha.penguintech.io"
+  CORS_ORIGINS: "https://icecharts-alpha.localhost.local"
   DB_HOST: "postgres.icecharts-alpha.svc.cluster.local"
   REDIS_HOST: "redis.icecharts-alpha.svc.cluster.local"
   MINIO_ENDPOINT: "minio.icecharts-alpha.svc.cluster.local:9000"

k8s/kustomize/overlays/alpha/ingress.yaml

@@ -10,10 +10,10 @@ spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - icecharts-alpha.penguintech.io
+    - icecharts-alpha.localhost.local
     secretName: icecharts-alpha-tls
   rules:
-  - host: icecharts-alpha.penguintech.io
+  - host: icecharts-alpha.localhost.local
     http:
       paths:
       - path: /api

k8s/kustomize/overlays/beta/configmap-patch.yaml

@@ -6,7 +6,7 @@ data:
   FLASK_ENV: "production"
   LOG_LEVEL: "info"
   RELEASE_MODE: "false"
-  CORS_ORIGINS: "https://icecharts.penguintech.io"
+  CORS_ORIGINS: "https://icecharts.penguintech.cloud"
   DB_HOST: "postgres.icecharts-beta.svc.cluster.local"
   REDIS_HOST: "redis.icecharts-beta.svc.cluster.local"
   MINIO_ENDPOINT: "minio.icecharts-beta.svc.cluster.local:9000"

k8s/kustomize/overlays/beta/ingress.yaml

@@ -10,10 +10,10 @@ spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - icecharts.penguintech.io
+    - icecharts.penguintech.cloud
     secretName: icecharts-tls
   rules:
-  - host: icecharts.penguintech.io
+  - host: icecharts.penguintech.cloud
     http:
       paths:
       - path: /api

k8s/manifests/configmap.yaml

@@ -21,7 +21,7 @@ data:
   STORAGE_PROVIDER: "minio"
   MINIO_BUCKET: "icecharts"
   MINIO_SECURE: "false"
-  CORS_ORIGINS: "https://icecharts.penguintech.io"
+  CORS_ORIGINS: "https://icecharts.penguintech.cloud"
   LICENSE_SERVER_URL: "https://license.penguintech.io"
   PRODUCT_NAME: "icecharts"
   RELEASE_MODE: "false"

k8s/manifests/ingress.yaml

@@ -15,10 +15,10 @@ spec:
   ingressClassName: nginx
   tls:
   - hosts:
-    - icecharts.penguintech.io
+    - icecharts.penguintech.cloud
     secretName: icecharts-tls
   rules:
-  - host: icecharts.penguintech.io
+  - host: icecharts.penguintech.cloud
     http:
       paths:
       - path: /api

k8s/manifests/overlays/alpha/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
   - ../../base
 
 # Override namespace for alpha
-namespace: icecharts-alpha
+namespace: icecharts
 
 # Apply patches for alpha environment using new syntax
 patches:
@@ -40,7 +40,7 @@ patches:
         value: ghcr.io/penguintech/icecharts-api:alpha
       - op: replace
         path: /spec/template/spec/containers/0/imagePullPolicy
-        value: Always
+        value: Never
   - target:
       kind: Deployment
       name: web
@@ -50,7 +50,7 @@ patches:
         value: ghcr.io/penguintech/icecharts-web:alpha
       - op: replace
         path: /spec/template/spec/containers/0/imagePullPolicy
-        value: Always
+        value: Never
 
   # Resource patches for API
   - target: