apiVersion: v1
kind: Namespace
metadata:
  name: ingress-nginx
  labels:
    app.kubernetes.io/component: ingress-nginx
    pod-security.kubernetes.io/enforce: privileged
---

apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: ingress-nginx
  namespace: flux-system
spec:
  interval: 1h
  install:
    createNamespace: true
  targetNamespace: ingress-nginx
  chart:
    spec:
      chart: ingress-nginx
      version: 4.12.3
      sourceRef:
        kind: HelmRepository
        name: ingress-nginx-repo
        namespace: flux-system
      interval: 60m
  values:
    controller:
      ingressClassResource:
        name: nginx
        enabled: true
        default: true
      kind: DaemonSet
      service:
        type: NodePort
      config:
        allow-snippet-annotations: true
        annotations-risk-level: Critical
        enable-global-auth: true