- Shipped
- September 27, 2026 at 4:55 AM UTC
- Author
- Kamo
- Commit
- 4380ab0
The media-route IngressRoute sends every path on a media.* host straight to MediaService, past the API gateway, so the gateway's carve-outs (master spec section 7 item 13) never applied there. POST **************** (SP09 M8, which writes a chat line as any member), /api/internal/push/dispatch, the Alertmanager, Jibri and social hooks and the AI outreach drop into a public-chat thread all answered from the internet with only a shared secret in the way. The route now cuts /api/internal, /internal, /api/media/internal, /api/meet/internal and **************** Every caller is in the cluster and uses kamowsmedia-service directly. MediaIngressRouteTest holds every internal mapping behind the exclusions and checks that no public mapping or STOMP endpoint falls under one.