From 1983d12724517bd5df3ae8a79c78a3f517b77b74 Mon Sep 17 00:00:00 2001
From: Vaibhav Pathak <vaibhav.pathak@Vaibhavs-MacBook-Air.local>
Date: Thu, 21 May 2026 14:51:05 +0530
Subject: [PATCH] fix: use in-cluster Gitea URL for backstage proxy target

The /gitea/api proxy was pointing at the external Gitea hostname which
is unreachable from inside the Kubernetes cluster (no hairpin NAT). Switch
to the in-cluster service DNS, set secure: false for plain HTTP, and
remove the redundant 'Basic ' prefix from the Authorization header.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 templates/backstage-configmap.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/backstage-configmap.yaml b/templates/backstage-configmap.yaml
index d0120af..dc47af7 100644
--- a/templates/backstage-configmap.yaml
+++ b/templates/backstage-configmap.yaml
@@ -104,11 +104,11 @@ data:
           secure: true
 
         '/gitea/api':
-          target: '{{ .Values.integrations.gitea.url }}'
+          target: '{{ .Values.backstage.gitea.inClusterUrl }}'
           changeOrigin: true
-          secure: true
+          secure: false
           headers:
-            Authorization: 'Basic ${GITEA_AUTH_HEADER}'
+            Authorization: ${GITEA_AUTH_HEADER}
 
         '/github/api':
           target: 'https://api.github.com'