- gateway install/upgrade renders an HA gateway (2 replicas, RollingUpdate,
PDB, hostname spread, downward-API namespace, RWX /opt/apps on the platform
class); a Helm-managed gateway is recorded and left alone
- gateway status shows which apps run on which replica
- ingress add-host/remove-host/list: one Ingress per host or wildcard, TLS
from a Secret or a cert-manager ClusterIssuer (wildcards require DNS-01),
upstream-hash-by $host pinning; hosts stored in the platform ConfigMap
- apply skips the per-app Ingress when routed hosts already cover the app
in the gateway's namespace and no OAuth is used; per-app Ingresses also pin
by host
- status, logs and binary updates reach every gateway replica
- delete-app --purge [--drop-database]; Postgres drops only databases whose
owner comment matches; apply records database_engine for later cleanup
fdfd615fd9