Keep simulator API error bodies through Ingress instead of branded HTML.

Disable ingress-nginx intercept for 404/405 on all lab Ingresses and document
how to verify JSON/XML responses after upgrade.

charts/api-simulators-lab/values.yaml

@@ -168,7 +168,11 @@ ingresses:
     tls:
       - secretName: simulators-proxmox-tls
         hosts: [proxmox.lab.local]
-    annotations: {}
+    annotations:
+      # Keep API JSON/XML bodies (404/405/401). Do not list 404/405 here —
+      # cluster custom-http-errors would otherwise replace them with branded HTML.
+      nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
+      nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
 
   ovirt:
     enabled: true
@@ -181,7 +185,9 @@ ingresses:
     tls:
       - secretName: simulators-ovirt-tls
         hosts: [ovirt.lab.local]
-    annotations: {}
+    annotations:
+      nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
+      nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
 
   vmware:
     enabled: true
@@ -195,6 +201,8 @@ ingresses:
       - secretName: simulators-vmware-tls
         hosts: [vmware.lab.local]
     annotations:
+      nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
+      nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
       nginx.ingress.kubernetes.io/configuration-snippet: |
         proxy_set_header X-VMware-Service "vcenter";
         proxy_set_header X-Forwarded-Port "443";
@@ -211,6 +219,8 @@ ingresses:
       - secretName: simulators-openstack-tls
         hosts: [openstack.lab.local]
     annotations:
+      nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
+      nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
       nginx.ingress.kubernetes.io/configuration-snippet: |
         proxy_set_header X-OpenStack-Service "https";
         proxy_set_header X-Forwarded-Port "443";
@@ -224,6 +234,9 @@ ingresses:
   #   tls:
   #     - secretName: simulators-ovirt-ui-tls
   #       hosts: [ovirt-ui.lab.local]
+  #   annotations:
+  #     nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
+  #     nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
   # openstack-keystone:
   #   enabled: true
   #   host: keystone.lab.local
@@ -233,6 +246,8 @@ ingresses:
   #     - secretName: simulators-keystone-tls
   #       hosts: [keystone.lab.local]
   #   annotations:
+  #     nginx.ingress.kubernetes.io/proxy-intercept-errors: "false"
+  #     nginx.ingress.kubernetes.io/custom-http-errors: "502,503"
   #     nginx.ingress.kubernetes.io/configuration-snippet: |
   #       proxy_set_header X-OpenStack-Service "keystone";