- Add p1_ingress() phase to install nginx-ingress-controller - Create ingress-nginx namespace with privileged PodSecurity label - Disable ServiceMonitor during bootstrap (Prometheus CRDs not installed yet) - Add namespace.yaml with PodSecurity labels (allows hostPort) - Filter cert-manager CRD errors (will be created by ArgoCD) - Include ingress phase in bootstrap 'all' flow
9 lines
221 B
YAML
9 lines
221 B
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: ingress-nginx
|
|
labels:
|
|
pod-security.kubernetes.io/enforce: privileged
|
|
pod-security.kubernetes.io/audit: privileged
|
|
pod-security.kubernetes.io/warn: privileged
|