apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: ingress-nginx

resources:
- https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v1.3.0/deploy/static/provider/cloud/deploy.yaml

replicas:
- name: ingress-nginx-controller
  count: 2

patches:
- patch: |-
    apiVersion: v1
    kind: Service
    metadata:
      name: ingress-nginx-controller
      namespace: ingress-nginx
    spec:
      externalIPs:
      - 172.30.0.147
      externalTrafficPolicy: Local

- patch: |-
    - op: add
      path: /spec/template/spec/containers/0/args/-
      value: >-
        --default-ssl-certificate=default/pyrocufflink-cert
  target:
    group: apps
    kind: Deployment
    name: ingress-nginx-controller
    version: v1

- patch: |-
    apiVersion: networking.k8s.io/v1
    kind: IngressClass
    metadata:
      name: nginx
      annotations:
        ingressclass.kubernetes.io/is-default-class: "true"