ci(frontend): update oauth frontend image tags

ircs-prod/core/manifests/config-service.yaml

@@ -25,7 +25,7 @@ spec:
         - name: registry-secret
       containers:
         - name: app
-          image: registry.mnnu.eu.org/ircs/ircs-config-service:sha-de9957f9ced5
+          image: registry.mnnu.eu.org/ircs/ircs-config-service:sha-fd3046b12539
           imagePullPolicy: IfNotPresent
           ports:
             - name: http

ircs-prod/core/manifests/frontend-bff.yaml

@@ -53,12 +53,6 @@ spec:
                 secretKeyRef:
                   name: ircs-prod-secrets
                   key: DB_PASSWORD
-            - name: APP_IDENTITY_JWT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: ircs-prod-secrets
-                  key: APP_IDENTITY_JWT_SECRET
-                  optional: true
             - name: APP_BFF_AUDIT_ENABLED
               value: "true"
             - name: IRCS_OUTBOUND_CIRCUIT_PORTAL_BFF_PROXY_ENABLED
@@ -104,6 +98,10 @@ metadata:
     environment: prod
 spec:
   type: ClusterIP
+  ipFamilyPolicy: PreferDualStack
+  ipFamilies:
+    - IPv4
+    - IPv6
   selector:
     app: ircs-portal-bff
   ports:
@@ -166,12 +164,6 @@ spec:
                 secretKeyRef:
                   name: ircs-prod-secrets
                   key: DB_PASSWORD
-            - name: APP_IDENTITY_JWT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: ircs-prod-secrets
-                  key: APP_IDENTITY_JWT_SECRET
-                  optional: true
             - name: APP_BFF_AUDIT_ENABLED
               value: "true"
             - name: APP_BFF_SERVICE_ID
@@ -226,6 +218,10 @@ metadata:
     environment: prod
 spec:
   type: ClusterIP
+  ipFamilyPolicy: PreferDualStack
+  ipFamilies:
+    - IPv4
+    - IPv6
   selector:
     app: ircs-admin-bff
   ports:

ircs-prod/core/manifests/frontend-portal-admin.yaml

@@ -26,6 +26,7 @@ data:
 
     server {
         listen 80;
+        listen [::]:80;
         server_name _;
         client_max_body_size 50m;
 
@@ -107,6 +108,7 @@ data:
 
     server {
         listen 8080;
+        listen [::]:8080;
         server_name _;
         client_max_body_size 50m;
 
@@ -219,6 +221,53 @@ data:
     }
 ---
 apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ircs-admin-frontend-nginx
+  namespace: ircs-prod
+  labels:
+    app.kubernetes.io/part-of: ircs
+    environment: prod
+data:
+  default.conf: |
+    server {
+        listen 80;
+        listen [::]:80;
+        server_name localhost;
+
+        gzip on;
+        gzip_min_length 1k;
+        gzip_comp_level 6;
+        gzip_types text/plain application/javascript application/x-javascript text/css application/xml text/javascript application/json;
+
+        location / {
+            root   /usr/share/nginx/html;
+            index  index.html index.htm;
+            try_files $uri $uri/ /index.html;
+        }
+
+        location /api/ {
+            proxy_pass http://ircs-admin-bff.ircs-prod.svc.cluster.local:8080/api/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_buffering off;
+            proxy_cache off;
+            proxy_http_version 1.1;
+            proxy_set_header Connection "";
+
+            proxy_read_timeout 3600s;
+            proxy_send_timeout 3600s;
+        }
+
+        location /media/ {
+            proxy_pass http://ircs-admin-bff.ircs-prod.svc.cluster.local:8080/media/;
+        }
+    }
+---
+apiVersion: v1
 kind: Service
 metadata:
   name: ircs-portal-frontend
@@ -229,6 +278,10 @@ metadata:
     environment: prod
 spec:
   type: ClusterIP
+  ipFamilyPolicy: PreferDualStack
+  ipFamilies:
+    - IPv4
+    - IPv6
   selector:
     app: ircs-portal-frontend
   ports:
@@ -248,6 +301,10 @@ metadata:
     environment: prod
 spec:
   type: ClusterIP
+  ipFamilyPolicy: PreferDualStack
+  ipFamilies:
+    - IPv4
+    - IPv6
   selector:
     app: ircs-admin-frontend
   ports:
@@ -305,13 +362,13 @@ spec:
         environment: prod
       annotations:
         ircs.prodigalgal.com/no-public-route: "true"
-        ircs.prodigalgal.com/config-version: "bff-20260606-1"
+        ircs.prodigalgal.com/config-version: "ipv6-listen-20260615-1"
     spec:
       imagePullSecrets:
         - name: registry-secret
       containers:
         - name: huawai
-          image: registry.mnnu.eu.org/ircs/ircs-huawai-frontend:sha-fbd4430f6682
+          image: registry.mnnu.eu.org/ircs/ircs-huawai-frontend:sha-a31062f3a4b8
           imagePullPolicy: IfNotPresent
           ports:
             - name: http
@@ -319,6 +376,8 @@ spec:
           env:
             - name: BACKEND_URL
               value: http://ircs-frontend-gateway.ircs-prod.svc.cluster.local:80
+            - name: HOSTNAME
+              value: "::"
           resources:
             requests:
               cpu: 25m
@@ -372,11 +431,16 @@ spec:
         - name: registry-secret
       containers:
         - name: ircs-admin-frontend
-          image: registry.mnnu.eu.org/ircs/ircs-admin-frontend:sha-7a74ebb402ab
+          image: registry.mnnu.eu.org/ircs/ircs-admin-frontend:sha-ed4d82a1a0b7
           imagePullPolicy: IfNotPresent
           ports:
             - name: http
               containerPort: 80
+          volumeMounts:
+            - name: nginx-config
+              mountPath: /etc/nginx/conf.d/default.conf
+              subPath: default.conf
+              readOnly: true
           resources:
             requests:
               cpu: 10m
@@ -398,6 +462,10 @@ spec:
             initialDelaySeconds: 20
             periodSeconds: 20
             timeoutSeconds: 3
+      volumes:
+        - name: nginx-config
+          configMap:
+            name: ircs-admin-frontend-nginx
 ---
 apiVersion: apps/v1
 kind: Deployment
@@ -425,7 +493,7 @@ spec:
         environment: prod
       annotations:
         ircs.prodigalgal.com/no-public-route: "true"
-        ircs.prodigalgal.com/config-version: "bff-20260606-1"
+        ircs.prodigalgal.com/config-version: "ipv6-listen-20260615-1"
     spec:
       containers:
         - name: nginx

ircs-prod/core/manifests/identity-service.yaml

@@ -27,7 +27,7 @@ spec:
         - name: registry-secret
       containers:
         - name: app
-          image: registry.mnnu.eu.org/ircs/ircs-identity-service:sha-de9957f9ced5
+          image: registry.mnnu.eu.org/ircs/ircs-identity-service:sha-fd3046b12539
           imagePullPolicy: IfNotPresent
           ports:
             - name: http
@@ -50,12 +50,6 @@ spec:
                 secretKeyRef:
                   name: ircs-prod-secrets
                   key: DB_PASSWORD
-            - name: APP_IDENTITY_JWT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: ircs-prod-secrets
-                  key: APP_IDENTITY_JWT_SECRET
-                  optional: true
             - name: SECURITY_ADMIN_PASSWORD
               valueFrom:
                 secretKeyRef:

ircs-prod/migration/migrator-job.yaml

@@ -21,7 +21,7 @@ spec:
         - name: registry-secret
       containers:
         - name: migrator
-          image: registry.mnnu.eu.org/ircs/ircs-migrator:sha-de9957f9ced5
+          image: registry.mnnu.eu.org/ircs/ircs-migrator:sha-fd3046b12539
           imagePullPolicy: IfNotPresent
           env:
             - name: SPRING_DATASOURCE_URL