feat(k8s): expose workclub services via LAN NodePorts

Expose frontend, API, and Keycloak on stable NodePorts and align app/keycloak external URLs for local-network browser access.

infra/k8s/base/backend-service.yaml

@@ -6,11 +6,12 @@ metadata:
     app: workclub-api
     component: backend
 spec:
-  type: ClusterIP
+  type: NodePort
   selector:
     app: workclub-api
   ports:
   - name: http
     port: 80
     targetPort: 8080
+    nodePort: 30081
     protocol: TCP

infra/k8s/base/configmap.yaml

@@ -6,10 +6,10 @@ metadata:
     app: workclub
 data:
   log-level: "Information"
-  cors-origins: "http://localhost:3000"
-  api-base-url: "http://workclub-api"
-  keycloak-url: "http://workclub-keycloak"
-  keycloak-authority: "http://workclub-keycloak/realms/workclub"
+  cors-origins: "http://localhost:3000,http://192.168.240.200:30080"
+  api-base-url: "http://192.168.240.200:30081"
+  keycloak-url: "http://192.168.240.200:30082"
+  keycloak-authority: "http://192.168.240.200:30082/realms/workclub"
   keycloak-audience: "workclub-api"
   keycloak-realm: "workclub"
   

infra/k8s/base/frontend-service.yaml

@@ -6,11 +6,12 @@ metadata:
     app: workclub-frontend
     component: frontend
 spec:
-  type: ClusterIP
+  type: NodePort
   selector:
     app: workclub-frontend
   ports:
   - name: http
     port: 80
     targetPort: 3000
+    nodePort: 30080
     protocol: TCP

infra/k8s/base/keycloak-realm-import-configmap.yaml

@@ -71,12 +71,14 @@ data:
           "redirectUris": [
             "http://localhost:3000/*",
             "http://localhost:3001/*",
-            "http://workclub-frontend/*"
+            "http://workclub-frontend/*",
+            "http://192.168.240.200:30080/*"
           ],
           "webOrigins": [
             "http://localhost:3000",
             "http://localhost:3001",
-            "http://workclub-frontend"
+            "http://workclub-frontend",
+            "http://192.168.240.200:30080"
           ],
           "directAccessGrantsEnabled": true,
           "standardFlowEnabled": true,

infra/k8s/base/keycloak-service.yaml

@@ -6,11 +6,12 @@ metadata:
     app: workclub-keycloak
     component: auth
 spec:
-  type: ClusterIP
+  type: NodePort
   selector:
     app: workclub-keycloak
   ports:
   - name: http
     port: 80
     targetPort: 8080
+    nodePort: 30082
     protocol: TCP