Starting to need an internal-only ingress.

everything-app/app-ingress-nginx-internal.yaml

@@ -0,0 +1,54 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ingress-nginx
+  namespace: argocd
+spec:
+  destination:
+    namespace: cluster-ingress
+    server: https://kubernetes.default.svc
+  project: infra
+  source:
+    chart: ingress-nginx
+    repoURL: https://kubernetes.github.io/ingress-nginx
+    targetRevision: 4.12.1
+    helm:
+      parameters:
+        - name: controller.ingressClassResource.default
+          value: 'false'
+        - name: controller.ingressClassResource.name
+          value: 'internal-nginx'
+        - name: controller.config.annotations-risk-level
+          value: Critical
+        - name: controller.service.type
+          value: LoadBalancer
+        - name: controller.allowSnippetAnnotations
+          value: 'true'
+        - name: controller.resources.requests.cpu
+          value: 35m
+        - name: controller.resources.requests.memory
+          value: '351198544'
+        - name: controller.extraArgs.default-ssl-certificate
+          value: cluster-ingress/cluster-ingress-wildcard
+        - name: controller.config.http-snippet
+          value: 'more_set_headers -a "X-Robots-Tag: noai";
+
+            more_set_headers -a "X-Robots-Tag: Google-Extended: none";
+
+            more_set_headers -a "X-Robots-Tag: GPTBot: none";
+
+            more_set_headers -a "X-Robots-Tag: ChatGPT-User: none";
+
+            more_set_headers -a "X-Robots-Tag: anthropic-ai: none";
+
+            more_set_headers -a "X-Robots-Tag: CCBot: none";
+
+            more_set_headers -a "X-Robots-Tag: semrushbot: none";
+
+            more_set_headers -a "X-Robots-Tag: Amazonbot: none";
+
+            more_set_headers -a "X-Robots-Tag: dotbot: none";
+
+            more_set_headers -a "X-Robots-Tag: AhrefsBot: none";'
+        - name: controller.config.block-user-agents
+          value: ~*Amazonbot,~*SemrushBot,~*DotBot,~*Ahrefsbot,~*GPT