- Shipped
- November 11, 2026 at 5:38 AM UTC
- Author
- Kamo
- Commit
- 1729fe6
- marketing/: namespace, SA marketing-ci (Role limited to kamomarketing, long-lived token), SA site-edge (IngressRoutes only), the edge's middleware chain without X-Frame-Options, and apply.sh, which copies *** and creates site-edge-token (kamo + kamomarketing), site-edge-cookie-key and marketing-webhook-secret when missing. Applied by hand, like git-sync/: a deploy-services step would force a full reconcile, which today would revert the 2026-10-30 hand-patched public IP in coturn/freepbx/mediamtx. - traefik: watch kamomarketing (ingress + CRD providers), so the edge's routes cannot fall through in silence. - auto-cert: pre-issue **************** and seed later sites' preview hosts from SecurityService's marketing-sites routing table (site-edge-token).