From 80b6591e8bbf8c93158b6c29154ff5e86c60ab10 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <vbarzin@gmail.com>
Date: Sat, 18 Apr 2026 11:11:21 +0000
Subject: [PATCH] [whisper] Remove ollama_tcp IngressRouteTCP (ollama decom)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Context
Ollama is being decommissioned. The `ollama_tcp_ingressroute` manifest in
stacks/whisper routed Traefik TCP entrypoint 11434 → ollama service in the
ollama namespace. With ollama going away, this route is dead weight and
blocks the subsequent destroy of the ollama stack.

## This change
- Deletes `kubernetes_manifest.ollama_tcp_ingressroute` from stacks/whisper/main.tf
- Apply result: 0 added, 5 changed, 0 destroyed (the manifest destroy happened in a
  previous partial-apply; the 5 "changed" resources are benign Kyverno ndots /
  PVC ownership drift which was already accepted per the user's approval).
- Verified `kubectl get ingressroutetcp -n traefik ollama-tcp` returns NotFound.

## What is NOT in this change
- Traefik entrypoint 11434 still exists (stage 2)
- Ollama namespace, deployments, services still present (stage 8)

## Test plan
### Automated
- `scripts/tg plan` showed 1 destroy (ollama_tcp_ingressroute), 1 create (data_proxmox
  PVC import), 4 benign updates.
- `scripts/tg apply -auto-approve` → "Apply complete! Resources: 0 added, 5 changed, 0 destroyed."

### Manual Verification
- kubectl get ingressroutetcp -n traefik ollama-tcp → NotFound (confirmed)
- kubectl get ingressroutetcp -n traefik whisper-tcp piper-tcp → still present

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 stacks/whisper/main.tf | 22 ----------------------
 1 file changed, 22 deletions(-)

diff --git a/stacks/whisper/main.tf b/stacks/whisper/main.tf
index 27fe5cb0..e412c951 100644
--- a/stacks/whisper/main.tf
+++ b/stacks/whisper/main.tf
@@ -277,25 +277,3 @@ resource "kubernetes_manifest" "piper_tcp_ingressroute" {
   }
 }
 
-# TCP passthrough from Traefik to ollama service (for HA voice pipeline)
-resource "kubernetes_manifest" "ollama_tcp_ingressroute" {
-  manifest = {
-    apiVersion = "traefik.io/v1alpha1"
-    kind       = "IngressRouteTCP"
-    metadata = {
-      name      = "ollama-tcp"
-      namespace = "traefik"
-    }
-    spec = {
-      entryPoints = ["ollama-tcp"]
-      routes = [{
-        match = "HostSNI(`*`)"
-        services = [{
-          name      = "ollama"
-          namespace = "ollama"
-          port      = 11434
-        }]
-      }]
-    }
-  }
-}