From c21d1e40895d1babc8e4b5fdf31cfcf2661ae8fd Mon Sep 17 00:00:00 2001
From: Kirill Ilin <stitch14@yandex.ru>
Date: Mon, 2 Feb 2026 15:26:15 +0500
Subject: [PATCH] [kubernetes] use NodePort service instead of hostNetwork for
 ingress-nginx

Signed-off-by: Kirill Ilin <stitch14@yandex.ru>
---
 .../kubernetes/templates/helmreleases/ingress-nginx.yaml   | 7 +++++--
 packages/apps/kubernetes/templates/ingress.yaml            | 4 ++--
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/packages/apps/kubernetes/templates/helmreleases/ingress-nginx.yaml b/packages/apps/kubernetes/templates/helmreleases/ingress-nginx.yaml
index 6f7b0759..5cafff90 100644
--- a/packages/apps/kubernetes/templates/helmreleases/ingress-nginx.yaml
+++ b/packages/apps/kubernetes/templates/helmreleases/ingress-nginx.yaml
@@ -4,9 +4,12 @@ ingress-nginx:
   controller:
     kind: DaemonSet
     {{- if eq .Values.addons.ingressNginx.exposeMethod "Proxied" }}
-    hostNetwork: true
     service:
-      enabled: false
+      enabled: true
+      type: NodePort
+      nodePorts:
+        http: 30000
+        https: 30001
     {{- end }}
     {{- if not .Values.addons.certManager.enabled }}
     admissionWebhooks:
diff --git a/packages/apps/kubernetes/templates/ingress.yaml b/packages/apps/kubernetes/templates/ingress.yaml
index 2e7f9933..4adb7458 100644
--- a/packages/apps/kubernetes/templates/ingress.yaml
+++ b/packages/apps/kubernetes/templates/ingress.yaml
@@ -56,11 +56,11 @@ spec:
   - appProtocol: http
     name: http
     port: 80
-    targetPort: 80
+    targetPort: 30000
   - appProtocol: https
     name: https
     port: 443
-    targetPort: 443
+    targetPort: 30001
   selector:
     cluster.x-k8s.io/cluster-name: {{ .Release.Name }}
     node-role.kubernetes.io/ingress-nginx: ""