Kubernetes networking components — ingress controllers, load balancers, gateway implementations, and DNS automation.

Each Helm-based component follows the same shape:

<component>/
├── Chart.yaml          # Local chart wrapper (pins upstream version)
├── helmfile.yaml       # Helmfile release definition
├── values.yaml         # Upstream chart values (vendored for reference/diff)
├── values/             # Per-environment override files (mgmt.yaml, mgmt-public-*.yaml, ...)
├── upgrade.sh          # Idempotent upgrade helper
└── README.md           # Component-specific docs

Subdirectories that are not part of the runtime chart:

• backup/ — versioned snapshots produced by upgrade.sh (kept across syncs).
• docs/ — topic-specific guides (TLS setup, troubleshooting, migration notes).
• cr-chart/ — local custom-resource chart (used by nginx-gateway-fabric for tenant-level Gateway/NginxProxy resources).

• This directory is regenerated via ~/.claude/scripts/cicd-sync/sync-component.sh with sanitization (internal IPs, OAuth secrets, SSH host keys, Slack tokens, organization domains all replaced with example placeholders).
• Internal IP block 10.10.10.x is rewritten to the safe example range 192.168.1.x during sync.
• Korean dual-language comments (# English / 한국어) in source are stripped to English-only on sync.