seon
de52d4a1ec
- ingress-nginx admission Job 2개는 ttlSecondsAfterFinished: 0으로 완료 즉시 사라져 Argo CD가 영구 OutOfSync로 보고 selfHeal 때마다 다시 실행했다(2026-09-24 실측). Sync 훅(HookSucceeded 삭제)으로 돌린다. - front 정적 페이지의 /api/readyz 링크(404)를 제거한다(api의 /readyz는 /api 아래가 아님).
31 lines
1.1 KiB
YAML
31 lines
1.1 KiB
YAML
# ingress-nginx baremetal (NodePort) provider manifest, pinned; NodePorts fixed so the ALB target group (30080) matches.
|
|
# https://kubernetes.github.io/ingress-nginx/deploy/baremetal/
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.15.1/deploy/static/provider/baremetal/deploy.yaml
|
|
patches:
|
|
- target:
|
|
kind: Service
|
|
name: ingress-nginx-controller
|
|
namespace: ingress-nginx
|
|
patch: |-
|
|
- op: add
|
|
path: /spec/ports/0/nodePort
|
|
value: 30080
|
|
- op: add
|
|
path: /spec/ports/1/nodePort
|
|
value: 30443
|
|
# The admission Jobs have ttlSecondsAfterFinished: 0 and vanish after they complete, which Argo CD would report as
|
|
# OutOfSync forever (and re-run on every selfHeal). Run them as Sync hooks instead and let Argo CD delete them.
|
|
- target:
|
|
kind: Job
|
|
name: ingress-nginx-admission-.*
|
|
namespace: ingress-nginx
|
|
patch: |-
|
|
- op: add
|
|
path: /metadata/annotations
|
|
value:
|
|
argocd.argoproj.io/hook: Sync
|
|
argocd.argoproj.io/hook-delete-policy: HookSucceeded
|