feat(outline): redirect outline.futo.org

[zackpollard]

302s outline.futo.org to outline.immich.cloud until Outline moves to fip. DNS is immich-app/core-infra-tf#208.

[github-actions]

@@ spec.values.ingress @@
# helm.toolkit.fluxcd.io/v2/HelmRelease/tools/outline
! + one map entry added:
+ futo:
+   annotations:
+     cert-manager.io/cluster-issuer: letsencrypt-production
+     nginx.ingress.kubernetes.io/configuration-snippet: |
+       return 302 https://outline.immich.cloud$request_uri;
+       
+   className: nginx
+   hosts:
+   - host: outline.futo.org
+     paths:
+     - path: /
+       service:
+         identifier: app
+         port: http
+   tls:
+   - hosts:
+     - outline.futo.org
+     secretName: outline-futo-tls

@@ (root level) @@
# networking.k8s.io/v1/Ingress/tools/outline
! - one document removed:
- apiVersion: networking.k8s.io/v1
- kind: Ingress
- metadata:
-   name: outline
-   namespace: tools
-   annotations:
-     cert-manager.io/cluster-issuer: letsencrypt-production
-     nginx.ingress.kubernetes.io/proxy-body-size: "104857600"
-   labels:
-     app.kubernetes.io/instance: outline
-     app.kubernetes.io/managed-by: Helm
-     app.kubernetes.io/name: outline
-     helm.toolkit.fluxcd.io/name: outline
-     helm.toolkit.fluxcd.io/namespace: tools
- spec:
-   ingressClassName: nginx
-   rules:
-   - host: outline.immich.cloud
-     http:
-       paths:
-       - backend:
-           service:
-             name: outline-app
-             port:
-               number: 3000
-         path: /
-         pathType: Prefix
-   tls:
-   - hosts:
-     - outline.immich.cloud
-     secretName: outline-tls

@@ (root level) @@
# networking.k8s.io/v1/Ingress/tools/outline-app
! + one document added:
+ apiVersion: networking.k8s.io/v1
+ kind: Ingress
+ metadata:
+   name: outline-app
+   namespace: tools
+   annotations:
+     cert-manager.io/cluster-issuer: letsencrypt-production
+     nginx.ingress.kubernetes.io/proxy-body-size: "104857600"
+   labels:
+     app.kubernetes.io/instance: outline
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/name: outline
+     helm.toolkit.fluxcd.io/name: outline
+     helm.toolkit.fluxcd.io/namespace: tools
+ spec:
+   ingressClassName: nginx
+   rules:
+   - host: outline.immich.cloud
+     http:
+       paths:
+       - backend:
+           service:
+             name: outline-app
+             port:
+               number: 3000
+         path: /
+         pathType: Prefix
+   tls:
+   - hosts:
+     - outline.immich.cloud
+     secretName: outline-tls

@@ (root level) @@
# networking.k8s.io/v1/Ingress/tools/outline-futo
! + one document added:
+ apiVersion: networking.k8s.io/v1
+ kind: Ingress
+ metadata:
+   name: outline-futo
+   namespace: tools
+   annotations:
+     cert-manager.io/cluster-issuer: letsencrypt-production
+     nginx.ingress.kubernetes.io/configuration-snippet: |
+       return 302 https://outline.immich.cloud$request_uri;
+       
+   labels:
+     app.kubernetes.io/instance: outline
+     app.kubernetes.io/managed-by: Helm
+     app.kubernetes.io/name: outline
+     helm.toolkit.fluxcd.io/name: outline
+     helm.toolkit.fluxcd.io/namespace: tools
+ spec:
+   ingressClassName: nginx
+   rules:
+   - host: outline.futo.org
+     http:
+       paths:
+       - backend:
+           service:
+             name: outline-app
+             port:
+               number: 3000
+         path: /
+         pathType: Prefix
+   tls:
+   - hosts:
+     - outline.futo.org
+     secretName: outline-futo-tls

[futo-kritika]

Kritika Review

Adds a temporary redirect from outline.futo.org to outline.immich.cloud.

No findings

Confidence 4/5 · medium risk: The diff adds a second ingress with a configuration-snippet redirect and a Let's Encrypt cert for outline.futo.org. The review checked the snippet and cert-manager settings, but nothing shows the DNS change (core-infra-tf#208) is merged or ordered. HTTP-01 issuance fails until that DNS resolves to this cluster. The snippet also hardcodes the redirect target, so it needs to be removed when Outline moves.

Approved

Summary

The new ingress redirects outline.futo.org to the existing Outline hostname with a 302 response and requests a certificate for the alias. Its snippet configuration is compatible with the repository’s ingress controller settings, and its service reference matches the existing Outline ingress.

What's good

• Preserves the request path and query string while using a temporary redirect.
• Adds a dedicated TLS secret for the new hostname.

Commands offered: curl, fd, gh, jq, rg, yq; none run.

_{Reviews (1) · Last reviewed commit: "feat(outline): redirect outline.futo.org" · openai/gpt-6.1-sol · $0.02}

[futo-kritika]

kritika: confidence 4/5 with medium risk at c12eaa7.