rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(bootstrap): add Phase 1c nginx ingress controller

Browse Source 
- Add p1_ingress() phase to install nginx-ingress-controller
- Create ingress-nginx namespace with privileged PodSecurity label
- Disable ServiceMonitor during bootstrap (Prometheus CRDs not installed yet)
- Add namespace.yaml with PodSecurity labels (allows hostPort)
- Filter cert-manager CRD errors (will be created by ArgoCD)
- Include ingress phase in bootstrap 'all' flow
This commit is contained in:
Story Crater Bot
2026-07-25 12:39:07 -07:00
parent 8d63db9f3b
commit 47e7a2b1d6
3 changed files with 41 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/bootstrap/ingress/nginx-values.yaml
+2 -1
View File
@@ -79,10 +79,11 @@ controller:
# every exposed service in the cluster goes through here, so this single block
# is the cluster-wide "latency and availability" signal. Prometheus auto-discovers
# the ServiceMonitor (serviceMonitorSelectorNilUsesHelmValues: false in prometheus-values.yaml).
# NOTE: ServiceMonitor disabled during bootstrap (Prometheus CRDs not installed yet)
metrics:
enabled: true
serviceMonitor:
enabled: true
enabled: false # Will be enabled by ArgoCD after Prometheus CRDs are installed
namespace: ingress-nginx
interval: 30s
scrapeTimeout: 30s