From 56b6665723700ce1afa568f3e1679c25677c8ae4 Mon Sep 17 00:00:00 2001
From: planpal <planpal@local>
Date: Wed, 2 Sep 2026 13:56:02 +0700
Subject: [PATCH] envs: own host+cert+ALB per env; prod=prod.fakhri-k8, keep
 old live untouched

---
 planpalto-helm/values-prod.yaml    | 9 +++++----
 planpalto-helm/values-staging.yaml | 3 ++-
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/planpalto-helm/values-prod.yaml b/planpalto-helm/values-prod.yaml
index 71570c9..e3b8a42 100644
--- a/planpalto-helm/values-prod.yaml
+++ b/planpalto-helm/values-prod.yaml
@@ -1,6 +1,6 @@
 # Prod overrides. Everything else inherits values.yaml.
-# Keeps the existing live host and ALB group (planpal-helm) so this env
-# adopts the running deployment instead of standing up a second one.
+# Own host + ALB group, separate from the pre-Argo live release still serving
+# fakhri-k8 from the planpal-helm namespace. Cut DNS over to this later.
 namespace: planpal-prod
 
 image:
@@ -18,8 +18,9 @@ externalSecrets:
     frontend-env: planpal/frontend
 
 ingress:
-  host: fakhri-k8.sandbox.devopsinstitute.id
-  groupName: planpal-helm   # existing live ALB group
+  host: prod.fakhri-k8.sandbox.devopsinstitute.id
+  certArn: arn:aws:acm:ap-southeast-3:134604498185:certificate/79b1f257-0f66-4b32-96cb-5ea5c12792f6
+  groupName: planpal-prod   # own ALB, NOT the old planpal-helm group
 
 seedJob:
   enabled: true
diff --git a/planpalto-helm/values-staging.yaml b/planpalto-helm/values-staging.yaml
index 6414f75..2a16f93 100644
--- a/planpalto-helm/values-staging.yaml
+++ b/planpalto-helm/values-staging.yaml
@@ -22,7 +22,8 @@ externalSecrets:
 
 ingress:
   host: staging.fakhri-k8.sandbox.devopsinstitute.id
-  groupName: planpal-staging   # own ALB, separate from prod
+  certArn: arn:aws:acm:ap-southeast-3:134604498185:certificate/5d0f65f5-9d93-4c2e-87db-b9afe8972048
+  groupName: planpal-staging   # own ALB, separate from prod and the old live release
 
 # Seed the admin on staging too. Flip to false once seeded.
 seedJob: