Skip to content

design: public DNS strategy for platform.sei.io#73

Merged
bdchatham merged 2 commits intomainfrom
design/public-dns-platform-sei-io
Apr 10, 2026
Merged

design: public DNS strategy for platform.sei.io#73
bdchatham merged 2 commits intomainfrom
design/public-dns-platform-sei-io

Conversation

@bdchatham
Copy link
Copy Markdown
Collaborator

Summary

  • Design doc for adding platform.sei.io as the public-facing domain layer alongside existing prod.platform.sei.io
  • Per-namespace wildcard certs (*.pacific-1.platform.sei.io, etc.) with Gateway listeners enable structured hostnames: {deployment}-{protocol}.{namespace}.platform.sei.io
  • All public endpoints behind HTTPS on port 443, managed by External-DNS from HTTPRoute hostnames
  • Four-phase rollout: Route53 zone → TLS + Gateway → Controller → Migration

Key decisions for review

  • Hostname pattern: {deploymentName}-{protocol}.{namespace}.platform.sei.io — protocol as hyphen-delimited suffix, namespace as subdomain
  • Per-namespace wildcards vs single flat wildcard — chosen for multi-tenant readiness and unambiguous parsing
  • Static cert/listener declarations in platform repo for now, dynamic provisioning later
  • Additive approach — existing prod.platform.sei.io untouched, dual hostnames on same HTTPRoute

🤖 Generated with Claude Code

Add design doc for introducing platform.sei.io as the public-facing
domain layer alongside the existing prod.platform.sei.io infrastructure.
Per-namespace wildcard certs, Gateway listeners, and controller dual-hostname
generation enable HTTPS on standard ports for all public endpoints.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Update design to use Terraform for hosted zone creation, NS delegation,
and IRSA policy updates instead of AWS CLI.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@bdchatham bdchatham merged commit 0284501 into main Apr 10, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant