From 944ba711e2c1cd2bea0ef8198922bbcfe4cf737f Mon Sep 17 00:00:00 2001
From: Mukul Sharma <mukul.sharma@mukul.sharma>
Date: Mon, 31 Aug 2026 14:40:18 +0530
Subject: [PATCH] harbor ingress fix

---
 extra-manifests/harbor-ingress-tailscale.yaml | 42 ++++++++++++++++---
 1 file changed, 37 insertions(+), 5 deletions(-)

diff --git a/extra-manifests/harbor-ingress-tailscale.yaml b/extra-manifests/harbor-ingress-tailscale.yaml
index 3724eaa..85aefa5 100644
--- a/extra-manifests/harbor-ingress-tailscale.yaml
+++ b/extra-manifests/harbor-ingress-tailscale.yaml
@@ -1,9 +1,13 @@
 # Harbor's chart has no multi-host mechanism at all (checked against the
 # actual template — no extraHosts like argo-cd, no secondaryingress like
-# jenkins). This is a standalone second Ingress routing the Tailscale
-# hostname to the same backend the chart's own Ingress uses
-# (harbor-core:80) — confirmed against the real rendered Service, not
-# assumed.
+# jenkins), so this is a standalone second Ingress for the Tailscale
+# hostname. Correction from an earlier version of this file: it routed
+# everything to harbor-core alone. That's wrong — harbor-core is the
+# API/auth backend; the actual web UI (the portal you log into) is served
+# by harbor-portal. Mirrors the chart's own generated Ingress path split
+# exactly (confirmed against its real rendered spec, not assumed this
+# time): /api/, /service/, /v2/, /c/ go to harbor-core, everything else
+# goes to harbor-portal.
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -15,10 +19,38 @@ spec:
     - host: "harbor.100.90.248.118.nip.io"
       http:
         paths:
-          - path: /
+          - path: /api/
             pathType: Prefix
             backend:
               service:
                 name: harbor-core
                 port:
                   number: 80
+          - path: /service/
+            pathType: Prefix
+            backend:
+              service:
+                name: harbor-core
+                port:
+                  number: 80
+          - path: /v2/
+            pathType: Prefix
+            backend:
+              service:
+                name: harbor-core
+                port:
+                  number: 80
+          - path: /c/
+            pathType: Prefix
+            backend:
+              service:
+                name: harbor-core
+                port:
+                  number: 80
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: harbor-portal
+                port:
+                  number: 80