pangolin ingress

manifest/overlays/production/vmcp-servers/full-vmcp-ingress.yaml

@@ -5,10 +5,10 @@ metadata:
   namespace: toolhive-system
   labels:
     app.kubernetes.io/name: full-vmcp
-  annotations:
-    dns.public: 'true'
-    dns.public.access.policy: google-ws
-    dns.public.hostname: full-vmcp.olb42.com
+  # annotations:
+    # dns.public: 'false'
+    # dns.public.access.policy: google-ws
+    # dns.public.hostname: full-vmcp.olb42.com
 spec:
   entryPoints:
     - websecure
@@ -19,6 +19,12 @@ spec:
         - name: vmcp-full-vmcp
           namespace: toolhive-system
           port: 4483
+    - kind: Rule
+      match: Host(`full-vmcp.ngorse.com`)
+      services:
+        - name: vmcp-full-vmcp
+          namespace: toolhive-system
+          port: 4483
   # No default TLSStore in this cluster, so reference the wildcard cert
   # explicitly. olb42-wildcard-tls is auto-reflected into every namespace.
   tls: