# ------------------------------------------------------------------------------
# Ingress — ArgoCD via ingress-nginx
# Temporary until Cilium Gateway API is stable
# TLS terminated at ingress, argocd-server runs in insecure mode
# ------------------------------------------------------------------------------
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: argocd
  namespace: argocd
  annotations:
    nginx.ingress.kubernetes.io/ssl-passthrough: "false"
    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
spec:
  ingressClassName: nginx
  tls:
    - hosts:
        - argocd.local.mk-labs.cloud
      secretName: argocd-tls
  rules:
    - host: argocd.local.mk-labs.cloud
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: argocd-server
                port:
                  number: 80