adding argocd final bootstrap

bootstrap/argocd-install/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: argocd-server
+  namespace: argocd
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: argocd.haven
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: argocd-server
+                port:
+                  number: 80

bootstrap/argocd-install/kustomization.yaml

@@ -5,3 +5,10 @@ namespace: argocd
 
 resources:
   - https://github.com/argoproj/argo-cd.git/manifests/cluster-install?ref=stable
+  - ingress.yaml
+
+# Serve plain HTTP behind the nginx ingress (TLS terminates at nothing —
+# internal-only app convention). Applied live via kubectl patch on first
+# install; this file keeps git as the source of truth.
+patches:
+  - path: server-insecure-patch.yaml

bootstrap/argocd-install/server-insecure-patch.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cmd-params-cm
+data:
+  server.insecure: "true"