protect brusnika stage ingress lb selector

clusters/brusnika-stage/flux-system/gotk-sync.yaml

@@ -19,9 +19,10 @@ metadata:
   name: flux-system
   namespace: flux-system
 spec:
-  interval: 10m0s
+  interval: 1m0s
   path: ./clusters/brusnika-stage
   prune: true
+  retryInterval: 30s
   sourceRef:
     kind: GitRepository
     name: flux-system

clusters/brusnika-stage/infrastructure/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
   - ../../../infrastructure/istio-gateway
   - ../../../infrastructure/istio-config
   - ../../../infrastructure/vault
+  - ./lb-service-override.yaml
   - ./vault-ingress.yaml
 patches:
   - path: ./patches/istio-gateway.yaml

clusters/brusnika-stage/infrastructure/lb-service-override.yaml

@@ -0,0 +1,40 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: cceaddon-nginx-ingress-controller
+  namespace: ingress-nginx
+  annotations:
+    kubernetes.io/elb.class: performance
+    kubernetes.io/elb.id: 1722cbcc-00cf-42aa-bc3b-3d029ffdf9db
+    meta.helm.sh/release-name: cceaddon-nginx-ingress
+    meta.helm.sh/release-namespace: ingress-nginx
+  labels:
+    app: nginx-ingress
+    app.kubernetes.io/managed-by: Helm
+    chart: nginx-ingress-2.5.6
+    component: controller
+    heritage: Helm
+    release: cceaddon-nginx-ingress
+spec:
+  type: LoadBalancer
+  loadBalancerIP: 192.168.0.230
+  allocateLoadBalancerNodePorts: true
+  externalTrafficPolicy: Cluster
+  internalTrafficPolicy: Cluster
+  ipFamilies:
+    - IPv4
+  ipFamilyPolicy: SingleStack
+  selector:
+    app: istio-ingressgateway
+    istio: ingressgateway
+  ports:
+    - name: http
+      port: 80
+      protocol: TCP
+      targetPort: 80
+      nodePort: 31914
+    - name: https
+      port: 443
+      protocol: TCP
+      targetPort: 443
+      nodePort: 32382