new gitops template

cluster/apps/networking/ingress-nginx/helm-release.yaml

@@ -0,0 +1,65 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: ingress-nginx
+  namespace: networking
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://kubernetes.github.io/ingress-nginx
+      chart: ingress-nginx
+      version: 3.29.0
+      sourceRef:
+        kind: HelmRepository
+        name: ingress-nginx-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    controller:
+      replicaCount: 2
+      service:
+        type: LoadBalancer
+        externalIPs:
+          - ${CLUSTER_LB_INGRESS}
+        externalTrafficPolicy: Local
+      publishService:
+        enabled: true
+      config:
+        ssl-protocols: "TLSv1.3 TLSv1.2"
+        custom-http-errors: 404,401,403,500,503
+        enable-vts-status: "false"
+        hsts-max-age: "31449600"
+      metrics:
+        enabled: true
+        serviceMonitor:
+          enabled: true
+          namespace: networking
+          namespaceSelector:
+            any: true
+      extraArgs:
+        default-ssl-certificate: "networking/${SECRET_CLUSTER_DOMAIN_CERT}-tls"
+      resources:
+        requests:
+          memory: 250Mi
+          cpu: 50m
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchExpressions:
+                  - key: app.kubernetes.io/name
+                    operator: In
+                    values:
+                      - ingress-nginx-external
+              topologyKey: "kubernetes.io/hostname"
+    defaultBackend:
+      enabled: true
+      image:
+        repository: billimek/custom-error-pages
+        tag: 0.4.4
+      resources:
+        requests:
+          memory: 250Mi
+          cpu: 25m

cluster/apps/networking/ingress-nginx/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml