From 8447e15b993d5c0d7d26d42c3bcff74b47796d33 Mon Sep 17 00:00:00 2001
From: Yurii <yurri.yevtushenko.work@gmail.com>
Date: Mon, 24 Aug 2026 11:58:21 +0300
Subject: [PATCH] fix(ssl): migrate to CloudFlare ssl

---
 manifests/calculator/ingress.yaml |  1 -
 manifests/portfolio/ingress.yaml  |  1 -
 manifests/tikceto/backend.yaml    | 10 +++++++++-
 manifests/tikceto/ingress.yaml    |  1 -
 4 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/manifests/calculator/ingress.yaml b/manifests/calculator/ingress.yaml
index 057aa02..6bfbea2 100644
--- a/manifests/calculator/ingress.yaml
+++ b/manifests/calculator/ingress.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: calculator
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls.certresolver: default
 spec:
   ingressClassName: traefik 
   tls:
diff --git a/manifests/portfolio/ingress.yaml b/manifests/portfolio/ingress.yaml
index 84280c5..9dbc746 100644
--- a/manifests/portfolio/ingress.yaml
+++ b/manifests/portfolio/ingress.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: portfolio
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls.certresolver: default
 spec:
   ingressClassName: traefik 
   tls:
diff --git a/manifests/tikceto/backend.yaml b/manifests/tikceto/backend.yaml
index bff751e..698ff7c 100644
--- a/manifests/tikceto/backend.yaml
+++ b/manifests/tikceto/backend.yaml
@@ -34,6 +34,15 @@ spec:
       labels:
         app: ticketo-api
     spec:
+      tolerations:
+        - key: "node.kubernetes.io/not-ready"
+          operator: "Exists"
+          effect: "NoExecute"
+          tolerationSeconds: 15
+        - key: "node.kubernetes.io/unreachable"
+          operator: "Exists"
+          effect: "NoExecute"
+          tolerationSeconds: 15
       affinity:
         podAntiAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
@@ -46,7 +55,6 @@ spec:
       securityContext:
         runAsNonRoot: true
         runAsUser: 1000
-
       containers:
       - name: ticketo-api
         image: ghcr.io/k5sha/tikceto:b1b527e
diff --git a/manifests/tikceto/ingress.yaml b/manifests/tikceto/ingress.yaml
index 5ad601b..959de72 100644
--- a/manifests/tikceto/ingress.yaml
+++ b/manifests/tikceto/ingress.yaml
@@ -5,7 +5,6 @@ metadata:
   namespace: tikceto
   annotations:
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
-    traefik.ingress.kubernetes.io/router.tls.certresolver: default
     traefik.ingress.kubernetes.io/router.middlewares: tikceto-strip-tikceto-prefix@kubernetescrd
 spec:
   ingressClassName: traefik