infcloud added. davical additional ingress at c2.aggtaa.com

clusters/base/apps/davical/helmrelease-davical.yaml

@@ -90,6 +90,11 @@ spec:
         # No stripPrefix middleware either: Apache needs to see the /server
         # prefix itself (via the Alias added in the seed-config initContainer)
         # so that DAViCal's self-referential links come out correct.
+        #
+        # c2.aggtaa.com/server is the same backend, reachable same-origin
+        # from InfCloud (also on c2.aggtaa.com) so its browser-side CalDAV
+        # requests don't need CORS. That ingress owns the cert-manager
+        # annotation for c2.aggtaa.com; this one just reuses its secret.
         hosts:
           - host: c.aggtaa.com
             paths:
@@ -98,10 +103,20 @@ spec:
                 service:
                   identifier: app
                   port: http
+          - host: c2.aggtaa.com
+            paths:
+              - path: /server
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
         tls:
           - secretName: radicale-tls
             hosts:
               - c.aggtaa.com
+          - secretName: infcloud-tls
+            hosts:
+              - c2.aggtaa.com
 
     persistence:
       config:

clusters/base/apps/davical/secret.enc.yaml

@@ -4,21 +4,21 @@ metadata:
     name: davical-secrets
     namespace: pim
 stringData:
-    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:6Jq0b77PNViMRIjKsIJPUTlWr3x1BJnjXUMm/UJdylDvc25IR9zb0PeN5O+UN3VW,iv:k+v9gxkjr5Y3o4YMBTeSZ6fq2XmcQHq4dbIzZ1aBm8k=,tag:fmOMjx90AvKFR1SBvpOITw==,type:str]
-    PASSDAVDB: ENC[AES256_GCM,data:FhXHxwd0aW4SzglYBEp5w5a0EXYYoeqSTBK7Samf1wQeNogJp69TqJBtv3pkoR4P,iv:qLFh2Ysah4F2KMowgDYgtHsCXsstSQxn7+pZAEyPOnk=,tag:rWxqEPnEwEmTCOcKewcSuQ==,type:str]
-    ADMINDAVICALPASS: ENC[AES256_GCM,data:4GtUmg0kTbqelWXtRFc4H7XlEgFTDAz4rni1GGNfRO0=,iv:quvQT1uHRMLRo7eTrzgs1xjhkpnDvl/R9No0Q6jGVIk=,tag:4hpt5VvXL8CvjbdL0u2UMA==,type:str]
+    PGSQL_ROOT_PASS: ENC[AES256_GCM,data:QGqssqH3ma/i6jKX46QrWT/ibuqxfTBjH8GRZP+EFZ19KgmW2MeUqPHp2b0KcPT9,iv:iwby/dEzV0X2Ca7diTLzUT5V+e3G2z4bxJSDyiblI8U=,tag:67s/Lo4CjjsDEkITKFnq5g==,type:str]
+    PASSDAVDB: ENC[AES256_GCM,data:UiW+Tf5LAQ24mthrB5pYqMt7V3G1oOC8eFnSZkVKHA2JIMEl3ptsO+tesl8Ada1y,iv:NDVa9RXC+uIGwKDUuTa6+nMiH9vpWuEIExzmKQTIS4k=,tag:ZN0aYgvUZX392DWAoV0jyA==,type:str]
+    ADMINDAVICALPASS: ENC[AES256_GCM,data:xnZTsq+ba9oCdtYnxuZbnlB4lcniOGpnKZSqqyCcG8w=,iv:vVaO2gg0o3LI6ZtNDPdjjnlm6dyYmeUT1jQRgyJ8Cqw=,tag:ILhGxMaB+Mmv2vyKbPyYaQ==,type:str]
 sops:
     age:
         - recipient: age1yx8mey02c0mu6te9hwxwdqp5n4enjz35e8thchsmvhqw7xsrzy0syg367g
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNlhHS1B1L0JYa2FtYklt
-            UUt2UlJqNVFoZG5rU3laSTl3amtXQ0VnV2hNClhPbzVYejlkVVU1dG1tOU05QTBa
-            cEFkZ3ZkbjliZkVRM3ZPZkJkZmhTbXMKLS0tIEk5dHJmaFp1UGJVNFM3SlYwYUsz
-            RjkyQ3BUQktoK3Q2ejJtYVprTERzRFkKJsBYjpBQ5vrGjCe5UTBwbeGQCb5EImGz
-            HP7rtwdF+ACy3FBQCRpjR4wSZPmnN5tRth4Ut3SDvIzvpEx7p6gnEA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOcFhiVUNkZVRZU2hHUXhI
+            RlNzYXdIdElMbSttYVFibUM2NHVObWV4T1ZrCkp3ek9ZdEE0VTdMaWlRdHk3amsx
+            dmUvblo4ZVM4OEdnOXhkYmV2a2R4dkkKLS0tIHhoVUd4QThTZXVsNDMwVXY1bk4v
+            U0hLMkd1bllzaUxSVTRVUEk5WDgvZjAKIHfqnZMlM8IA83jIu6Isd+XObtATeUkp
+            vFRK/oxl3bV8OgyTFtTDotb16CvhN6IBjKqfC+7CIsrOh9fBwxwuQw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:24:10Z"
-    mac: ENC[AES256_GCM,data:8CXLLLEwaaUqMa1PEwVok88CJsc+0VlsotyaZR+gkW53EnZBLi+jAxNm5j6ISpn/TJw2pLCMXGf8vB164OX4w0YPm5dVPQUhBNxONRcnbD/Cil54PIlG4MGgCIfalKDpB2Je0NpU+81B7KYQlaBezbNb0+G4GgTqwaY04rfs0mw=,iv:bYEiFvVqqiDi42G8oYvfKaHmEfkb2zLjfDJU2PmEZjc=,tag:lHO8xRWvAyh3CSVEB/+l6Q==,type:str]
+    lastmodified: "2026-08-26T10:24:17Z"
+    mac: ENC[AES256_GCM,data:gvbGpqeSUj6qHNcDX+FBxJJWGglNQwR61yWUo5wBrVaagxaO342pq/sDF7oDBG8AzIfSNk5kXuWzkWe8KJLFnCxzw4XxoFqBDp2Mlkr1iQfKVptj+Urv2Vrsgd9CN5ctUuDoas8U+oQhu5G4pni/KRLXBUwdO0Z0ZyzzdDaDGSU=,iv:Dc/o2x4dfT4Sx+5nqTIPx7wh5u0/ThO1uduLcGX8byk=,tag:AR716bU6P84AyyOVT8NwzA==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0