Somehow during a cluster upgrade, any apps that had multiple domains lost some of their annotations. router.deis.io/ssl.enforce and router.deis.io/domains were both missing, making the apps non-routable, even if deis routing:disable and deis routing:enable are run. There doesn't appear to be a command to rebuild/validate/correct service annotations and this doesn't log any errors.