# Offloading setting.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ing-argocd
  namespace: argocd
  annotations:
    #nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
    nginx.ingress.kubernetes.io/backend-protocol: "https"
    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
    nginx.ingress.kubernetes.io/whitelist-source-range: |
      133.186.208.56/32,
      133.186.208.12/32,
      133.186.251.95/32,
      125.6.60.6/32,
      125.6.60.4/32,
      125.6.60.5/32,
      125.6.60.7/32,
      106.254.240.2/32,
      103.243.200.17/32,
      103.243.200.31/32,
      103.243.200.47/32,
      43.227.119.246/32,
      43.227.119.245/32,
      43.227.119.21/32,
      43.227.119.20/32,
      13.124.57.101/32,
      13.124.28.178/32
spec:
  ingressClassName: nginx
  rules:
  - host: argocd.gyeonggido.nhncloud.com # 사전 생성된 인증서의 도메인적용.
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: argocd-server
            port:
              number: 443
  tls:
    - hosts:
      - "argocd.gyeonggido.nhncloud.com"
      secretName: gpulive-new-ssl