commit bdd0b8a4560fa289580e7ae25d9155e9108ea6e5
parent 0109b086d3045ecbccad39802f0bf9cd2261d187
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 15 Jan 2025 12:39:55 +0100
Use correct issuer
Diffstat:
7 files changed, 31 insertions(+), 39 deletions(-)
diff --git a/apps/base/calendar/release.yaml b/apps/base/calendar/release.yaml
@@ -28,7 +28,7 @@ spec:
ingress:
main:
annotations:
- cert-manager.io/cluster-issuer: letsencrypt-http
+ cert-manager.io/cluster-issuer: letsencrypt-dns
traefik.ingress.kubernetes.io/router.middlewares: calendar-subpath@kubernetescrd,calendar-stripprefix@kubernetescrd
enabled: true
hosts:
diff --git a/apps/base/chaosmesh/release.yaml b/apps/base/chaosmesh/release.yaml
@@ -31,7 +31,7 @@ spec:
ingress:
enabled: true
annotations:
- cert-manager.io/cluster-issuer: letsencrypt-http
+ cert-manager.io/cluster-issuer: letsencrypt-dns
hosts:
- name: chaos.nordgedanken.dev
tls: true
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -18,14 +18,14 @@ spec:
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: EnvoyProxy
metadata:
- name: custom-proxy-config
- namespace: envoy-gateway
+ name: custom-proxy-config
+ namespace: envoy-gateway
spec:
- provider:
- type: Kubernetes
- kubernetes:
- envoyDeployment:
- replicas: 3
+ provider:
+ type: Kubernetes
+ kubernetes:
+ envoyDeployment:
+ replicas: 3
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: GatewayClass
@@ -61,32 +61,32 @@ spec:
protocol: HTTP
port: 80
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
- name: https-midnightthoughts
protocol: HTTPS
hostname: "*.midnightthoughts.space"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: midnightthoughts.space-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: midnightthoughts.space-tls
- name: https-nordgedanken
protocol: HTTPS
hostname: "*.nordgedanken.dev"
port: 443
allowedRoutes:
- namespaces:
- from: "All"
+ namespaces:
+ from: "All"
tls:
- mode: Terminate
- certificateRefs:
- - kind: Secret
- name: nordgedanken.dev-tls
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: nordgedanken.dev-tls
---
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: ClientTrafficPolicy
diff --git a/apps/base/externaldns/release.yaml b/apps/base/externaldns/release.yaml
@@ -22,9 +22,9 @@ spec:
env:
- name: CF_API_TOKEN
valueFrom:
- secretKeyRef:
- name: cloudflare-api-token-secret
- key: api-token
+ secretKeyRef:
+ name: cloudflare-api-token-secret
+ key: api-token
sources:
- gateway-httproute
- gateway-grpcroute
@@ -37,13 +37,5 @@ spec:
resources: ["namespaces"]
verbs: ["get", "watch", "list"]
- apiGroups: ["gateway.networking.k8s.io"]
- resources:
- [
- "gateways",
- "httproutes",
- "grpcroutes",
- "tlsroutes",
- "tcproutes",
- "udproutes",
- ]
+ resources: ["gateways", "httproutes", "grpcroutes", "tlsroutes", "tcproutes", "udproutes"]
verbs: ["get", "watch", "list"]
diff --git a/apps/base/mastodon/release.yaml b/apps/base/mastodon/release.yaml
@@ -35,7 +35,7 @@ spec:
preset: small_cluster
ingress:
annotations:
- cert-manager.io/cluster-issuer: letsencrypt-http
+ cert-manager.io/cluster-issuer: letsencrypt-dns
external-dns.alpha.kubernetes.io/hostname: mastodon.mtrnord.blog
hosts:
- host: mastodon.mtrnord.blog
diff --git a/apps/base/zammad/release.yaml b/apps/base/zammad/release.yaml
@@ -31,7 +31,7 @@ spec:
ingress:
enabled: true
annotations:
- cert-manager.io/cluster-issuer: letsencrypt-http
+ cert-manager.io/cluster-issuer: letsencrypt-dns
hosts:
- host: zammad.midnightthoughts.space
paths:
diff --git a/infrastructure/controllers/cert-manager.yaml b/infrastructure/controllers/cert-manager.yaml
@@ -68,7 +68,7 @@ spec:
acme.cert-manager.io/http01-solver: "true"
ingress:
- ports:
- - protocol: TCP
- port: 8089
+ - protocol: TCP
+ port: 8089
policyTypes:
- Ingress
