fix: add HTTP redirect route to ListenerSet for apex domain

- Add balancer-http-redirect HTTPRoute attached to http sectionName
  in the ListenerSet, returning 301→HTTPS for balancerproject.org
- Set disableNameSuffixHash to prevent ConfigMap hash suffix drift
- Update ClusterIssuer annotation to letsencrypt-prod-gateway
- Add overlay patches for both production and sandbox hostnames

Refs: CodeForPhilly/cfp-live-cluster#160

Author: TineoC

deploy/manifests/balancer/base/gateway-listeners.yaml

@@ -3,7 +3,7 @@ kind: ListenerSet
 metadata:
   name: balancer-listeners
   annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
+    cert-manager.io/cluster-issuer: letsencrypt-prod-gateway
     hostname: HOSTNAME_PLACEHOLDER
 spec:
   parentRef:

deploy/manifests/balancer/base/httproute.yaml

@@ -1,4 +1,3 @@
-
 apiVersion: gateway.networking.k8s.io/v1
 kind: HTTPRoute
 metadata:
@@ -21,3 +20,24 @@ spec:
       backendRefs:
         - name: balancer
           port: 80
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: balancer-http-redirect
+  annotations:
+    hostname: HOSTNAME_PLACEHOLDER
+spec:
+  parentRefs:
+    - name: balancer-listeners
+      kind: ListenerSet
+      group: gateway.networking.k8s.io
+      sectionName: http
+  hostnames:
+    - HOSTNAME_PLACEHOLDER
+  rules:
+    - filters:
+        - type: RequestRedirect
+          requestRedirect:
+            scheme: https
+            statusCode: 301

deploy/manifests/balancer/base/kustomization.yaml

@@ -22,3 +22,6 @@ configMapGenerator:
   - name: balancer-config
     envs:
       - balancer.env
+
+generatorOptions:
+  disableNameSuffixHash: true

deploy/manifests/balancer/overlays/production/kustomization.yaml

@@ -38,6 +38,13 @@ patches:
   - target:
       kind: HTTPRoute
       name: balancer
+    patch: |
+      - op: replace
+        path: /spec/hostnames/0
+        value: balancerproject.org
+  - target:
+      kind: HTTPRoute
+      name: balancer-http-redirect
     patch: |
       - op: replace
         path: /spec/hostnames/0

deploy/manifests/balancer/overlays/sandbox/kustomization.yaml

@@ -43,6 +43,13 @@ patches:
       - op: replace
         path: /spec/hostnames/0
         value: sandbox.balancerproject.org
+  - target:
+      kind: HTTPRoute
+      name: balancer-http-redirect
+    patch: |
+      - op: replace
+        path: /spec/hostnames/0
+        value: sandbox.balancerproject.org
   - target:
       kind: Deployment
       name: balancer