🚀 Complete automation pipeline with SSL, testing, and deployment

✨ Features:
- Full SSL setup with Let's Encrypt for all environments
- Automated CI/CD pipeline with GitHub Actions
- Comprehensive smoke testing workflow
- Auto-deploy to dev on main branch push
- Manual staging/production deployments with confirmation
- Istio + nginx SSL termination architecture

🔧 Infrastructure:
- Migrated from Kourier to Istio for Knative ingress
- nginx handles SSL termination and public traffic
- Istio manages internal Knative service routing
- Scale-to-zero configuration for all environments

🧪 Testing:
- SSL certificate validation and expiry checks
- Domain accessibility and content validation
- Performance testing and redirect behavior validation
- Automated smoke tests on every deployment

🌐 Domains:
- Dev: https://2048-dev.wa.darknex.us
- Staging: https://2048-staging.wa.darknex.us
- Production: https://2048.wa.darknex.us

📦 Deployment:
- Uses latest GHCR images with imagePullPolicy: Always
- Automated secret management across namespaces
- Environment-specific Knative service configurations
- Clean manifest structure with proper labeling

scripts/setup-ssl.sh

@@ -1,105 +0,0 @@
-#!/bin/bash
-
-set -e
-
-echo "🔧 Setting up SSL for 2048 Game with Kourier..."
-
-# Colors for output
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-NC='\033[0m' # No Color
-
-# Function to print colored output
-print_status() {
-    echo -e "${GREEN}[INFO]${NC} $1"
-}
-
-print_warning() {
-    echo -e "${YELLOW}[WARN]${NC} $1"
-}
-
-print_error() {
-    echo -e "${RED}[ERROR]${NC} $1"
-}
-
-# Check if kubectl is available
-if ! command -v kubectl &> /dev/null; then
-    print_error "kubectl is not installed or not in PATH"
-    exit 1
-fi
-
-# Check if cluster is accessible
-if ! kubectl cluster-info &> /dev/null; then
-    print_error "Cannot connect to Kubernetes cluster"
-    exit 1
-fi
-
-print_status "Installing cert-manager..."
-kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.0/cert-manager.yaml
-
-print_status "Waiting for cert-manager to be ready..."
-kubectl wait --for=condition=ready pod -l app=cert-manager -n cert-manager --timeout=120s
-kubectl wait --for=condition=ready pod -l app=cainjector -n cert-manager --timeout=120s
-kubectl wait --for=condition=ready pod -l app=webhook -n cert-manager --timeout=120s
-
-print_status "Applying SSL certificate configuration..."
-kubectl apply -f manifests/ssl-certificate.yaml
-
-print_status "Configuring Knative domain..."
-kubectl apply -f manifests/knative-domain-config.yaml
-
-print_status "Configuring Kourier for SSL..."
-kubectl apply -f manifests/kourier-ssl-config.yaml
-
-print_status "Deploying all environments..."
-kubectl apply -f manifests/dev/
-kubectl apply -f manifests/staging/
-kubectl apply -f manifests/prod/
-
-print_status "Waiting for certificate to be issued..."
-echo "This may take a few minutes..."
-
-# Wait for certificate to be ready
-timeout=300
-counter=0
-while [ $counter -lt $timeout ]; do
-    if kubectl get certificate darknex-wildcard-cert -n knative-serving -o jsonpath='{.status.conditions[?(@.type=="Ready")].status}' | grep -q "True"; then
-        print_status "Certificate is ready!"
-        break
-    fi
-    echo -n "."
-    sleep 10
-    counter=$((counter + 10))
-done
-
-if [ $counter -ge $timeout ]; then
-    print_warning "Certificate is taking longer than expected to be issued."
-    print_warning "You can check the status with: kubectl describe certificate darknex-wildcard-cert -n knative-serving"
-fi
-
-print_status "Checking deployment status..."
-echo ""
-echo "=== Certificate Status ==="
-kubectl get certificates -n knative-serving
-
-echo ""
-echo "=== Domain Mappings ==="
-kubectl get domainmappings --all-namespaces
-
-echo ""
-echo "=== Knative Services ==="
-kubectl get ksvc --all-namespaces
-
-echo ""
-print_status "🎉 SSL setup complete!"
-echo ""
-echo "Your 2048 game should be accessible at:"
-echo "  • Development: https://2048-dev.wa.darknex.us"
-echo "  • Staging:     https://2048-staging.wa.darknex.us"
-echo "  • Production:  https://2048.wa.darknex.us"
-echo ""
-echo "To test SSL is working:"
-echo "  curl -I https://2048-dev.wa.darknex.us"
-echo "  curl -I https://2048-staging.wa.darknex.us"
-echo "  curl -I https://2048.wa.darknex.us"