apiVersion: enclii.dev/v1
kind: Service
metadata:
  name: janua
  project: janua

# RFC 0001 promotion policy — Janua is Pattern B (manual gate) because
# it is the ecosystem auth floor. Every other MADFAM service depends on
# Janua's JWTs; a wrong promote breaks every downstream login. Blast
# radius is maximum. The promote-to-prod.yml workflow's scheduled
# auto-promote job is disabled via the repo variable AUTO_PROMOTE_ENABLED
# (default: unset -> evaluated as "false"); leaving this value "manual"
# here is the policy record.
promotion:
  pattern: manual
  min_soak_minutes: 30
  require_smoke_pass: true

spec:
  # status.madfam.io tracking — Janua is the ecosystem auth floor.
  # Pre-existing entries on the platform configmap were hand-added in
  # the legacy era (before zero-touch). Declaring them here locks them
  # into the regenerate path so the next `POST /v1/admin/status/regenerate`
  # cannot silently drop them. See Phase 2 follow-up backfill 2026-04-27.
  status:
    enabled: true
    entries:
      - name: Auth
        url: https://auth.madfam.io/health
        href: https://auth.madfam.io
        group: Janua
        family: MADFAM Platform
        description: SSO authentication service
      - name: Janua Website
        url: https://janua.dev
        href: https://janua.dev
        group: Janua
        family: MADFAM Platform
        description: Product landing page
      - name: Janua Docs
        url: https://docs.janua.dev
        href: https://docs.janua.dev
        group: Janua
        family: MADFAM Platform
        description: Authentication documentation
  runtime:
    port: 8080
    replicas: 1
    healthCheck: /api/v1/health/ready
  # domains: intentionally NOT declared here — REMOVED 2026-08-27.
  #
  # This file is a legacy single Service doc named `janua`, but no cluster
  # Service named `janua` exists (the real ones are janua-api / janua-admin /
  # janua-dashboard / janua-website, each on port 80). On 2026-08-27 the
  # platform's domain reconciler captured the 8 domains that used to be listed
  # here onto that nonexistent backend and rewrote the tunnel's working ingress
  # rules to `janua.janua.svc:8080`, taking down auth.madfam.io, madfam.io and
  # janua.dev — the full identity outage. Until enclii supports per-domain
  # service targets (or this manifest is split into truthful per-surface
  # Service docs), the domain→service bindings live in the switchyard registry
  # ONLY: auth.madfam.io + api.janua.dev → janua-api · admin.janua.dev →
  # janua-admin · app.janua.dev → janua-dashboard · janua.dev + www → 
  # janua-website · madfam.io + www belong to the madfam-site project, not here.