Skip to content

fix: render shared ingress annotations as a merged map and guard nil browser.ingress#569

Merged
pantierra merged 2 commits into
fix/improve-ingressfrom
fix/unified-ingress-annotations-nil-safety
Jul 22, 2026
Merged

fix: render shared ingress annotations as a merged map and guard nil browser.ingress#569
pantierra merged 2 commits into
fix/improve-ingressfrom
fix/unified-ingress-annotations-nil-safety

Conversation

@lhoupert

@lhoupert lhoupert commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

Follow-up to reviewing #546. Fixes two render bugs in the centralized ingress helpers (traefik entrypoints + custom ingress.annotations produced invalid YAML; browser.ingress: null crashed the browser Deployment render), with regression tests that fail on the current branch head.

The second commit adds pinning tests for guarantees the refactor delivers:

  1. the strip-prefix annotation/Middleware are only rendered when a path is stripped
  2. the auth-proxied /stac path stays out of the strip-prefix list,
  3. docServer honors ingress.rootPath.

For 1. , the middleware tests fail against the templates on main, so they seem to lock in exactly the dangling-middleware fix #546 introduces.

…browser.ingress

Merging traefik entrypoints and user ingress.annotations via string
concatenation dropped the newline between them, producing invalid YAML
whenever both were set (whole release failed to template). Build a dict
and toYaml it once instead; mergeOverwrite keeps user annotations
winning over the generated entrypoints key.

Also make eoapi.browserIngressPath nil-safe: browser.ingress: null
crashed the browser Deployment render via the new SB_pathPrefix env,
even with ingress disabled. Regression tests added for both.
@lhoupert
lhoupert force-pushed the fix/unified-ingress-annotations-nil-safety branch from befe281 to f4af997 Compare July 22, 2026 10:03
Pin three previously untested behaviors of the centralized ingress
logic: the strip-prefix middleware annotation and Middleware object are
absent when no path needs stripping (the dangling-reference fix), the
auth-proxied stac path is excluded from strip-prefix prefixes, and
docServer honors ingress.rootPath.
@pantierra

Copy link
Copy Markdown
Contributor

🤖 Generated with Claude Code

Please have a look at the AI Use Policy. In particular write clear, concise PR descriptions in your own words and make sure the code submissions also follow the contribution guidelines.

@lhoupert

Copy link
Copy Markdown
Contributor Author

Sorry it has been the case, claude generated a PR with an empty description. I have been editing it myself

@pantierra

Copy link
Copy Markdown
Contributor

Thanks.

@pantierra
pantierra merged commit 1ae8e71 into fix/improve-ingress Jul 22, 2026
1 check passed
@pantierra
pantierra deleted the fix/unified-ingress-annotations-nil-safety branch July 22, 2026 10:30
pantierra pushed a commit that referenced this pull request Jul 23, 2026
pantierra pushed a commit that referenced this pull request Jul 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants