The /gitea/api proxy was pointing at the external Gitea hostname which
is unreachable from inside the Kubernetes cluster (no hairpin NAT). Switch
to the in-cluster service DNS, set secure: false for plain HTTP, and
remove the redundant 'Basic ' prefix from the Authorization header.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1983d12724