# ingress-nginx baremetal (NodePort) provider manifest, pinned; NodePorts fixed so the ALB target group (30080) matches.
# https://kubernetes.github.io/ingress-nginx/deploy/baremetal/
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.15.1/deploy/static/provider/baremetal/deploy.yaml
patches:
  - target:
      kind: Service
      name: ingress-nginx-controller
      namespace: ingress-nginx
    patch: |-
      - op: add
        path: /spec/ports/0/nodePort
        value: 30080
      - op: add
        path: /spec/ports/1/nodePort
        value: 30443
  # The admission Jobs have ttlSecondsAfterFinished: 0 and vanish after they complete, which Argo CD would report as
  # OutOfSync forever (and re-run on every selfHeal). Run them as Sync hooks instead and let Argo CD delete them.
  - target:
      kind: Job
      name: ingress-nginx-admission-.*
      namespace: ingress-nginx
    patch: |-
      - op: add
        path: /metadata/annotations
        value:
          argocd.argoproj.io/hook: Sync
          argocd.argoproj.io/hook-delete-policy: HookSucceeded