bootstrap ircs-prod gitops config

docs/cutover-runbook.md

@@ -0,0 +1,22 @@
+# HTTPRoute cutover runbook
+
+Current production domains are owned by `ircs-system` routes:
+
+- `huawai.sophia.fr.eu.org` -> `ircs-system/huawai-svc:80`
+- `ircs.sophia.fr.eu.org` -> `ircs-system/ircs-frontend-svc:80`
+
+V3 production routes are declared under `ircs-prod/edge-cutover`:
+
+- `huawai.sophia.fr.eu.org` -> `ircs-prod/ircs-frontend-gateway:80`
+- `ircs.sophia.fr.eu.org` -> `ircs-prod/ircs-frontend-gateway:8080`
+
+Cutover order:
+
+1. Confirm `ircs-prod` pods are Ready.
+2. Confirm cluster-internal portal/admin smoke is healthy.
+3. Disable automated sync on old `argocd/ircs-app` so it does not recreate old routes.
+4. Apply edge routes and delete old `ircs-system` business routes.
+5. Verify Envoy Gateway accepts the new routes.
+6. Verify external domains through the NLB/Cloudflare path.
+
+Use `scripts/cutover-httproute.ps1 -Execute` from this repo root when ready.