[barnabasbusa]

ACDT renamed the network to heze-devnet-1 and DNS, certs and Cloudflare Access for *.heze-devnet-1.ethpandaops.io are live, but the kubernetes ingresses still only answer on .focil-devnet-1.ethpandaops.io, so e.g. dora.heze-devnet-1.ethpandaops.io returns 404. This is a hard switchover of all public hostnames (ingress hosts, TLS, config URLs, authenticatoor return hosts and audience, homepage links) to heze-devnet-1. Node backends (.srv.focil-devnet-1) and network identifiers used by xatu/tracoor are unchanged, since the node DNS and hosts still use the old name.

[redpandabot]

Summary

This PR switches all public Kubernetes hostnames from focil-devnet-1 to heze-devnet-1 across ingresses, TLS, config URLs, authenticatoor issuer/audience and homepage links, while deliberately leaving node backends (*.srv.focil-devnet-1) and xatu/tracoor network identifiers alone. The rename itself looks complete and internally consistent for the public surface, but every touched file is generated by the Ansible generate_kubernetes_config role and the source inventory was not updated, so the change is not reproducible from the repo's source of truth.

Issues

• 🟡 kubernetes/devnet-1/config/values.yaml:6 — Ansible-generated files hand-edited; regeneration reverts the rename — Every changed file carries an Ansible managed. Don't change this file manually. header from ethpandaops.general.generate_kubernetes_config, and the templates derive public hosts from network_subdomain, which the inventory still computes from ethereum_network_name. ansible/inventories/devnet-1/inventory.ini:4 sets ethereum_network_name=focil-devnet-1 and no gen_kubernetes_config_network_display_name is set, so config.yaml.j2 (domain: {{ network_subdomain }}) and the rest regenerate focil-devnet-1.ethpandaops.io hosts and silently undo this switchover — the collection added gen_kubernetes_config_network_display_name/alias subdomains in ansible-collection-general #580/#581 specifically so a rename survives regeneration. The rename should be driven from the inventory (or the role extended for a canonical-name switch) rather than patched into the generated values.

---

_{Reviewed @ 2f402618
"Defaults are everything."}