commit fe306896b9cfa3f137bbaa07faf520279260ba7a parent 6d6d3344ee491350c3a0052f9b6cb21c48bfa44c Author: MTRNord <mtrnord1@gmail.com> Date: Tue, 23 Apr 2024 11:47:58 +0200 try to add an issuer for gw api Diffstat:
| M | clusters/production/infrastructure.yaml | | | 7 | +++++++ |
| M | infrastructure/configs/cluster-issuers.yaml | | | 35 | ++++++++++++++++++++++++++++++++++- |
2 files changed, 41 insertions(+), 1 deletion(-)
diff --git a/clusters/production/infrastructure.yaml b/clusters/production/infrastructure.yaml @@ -71,6 +71,13 @@ spec: target: kind: ClusterIssuer name: letsencrypt-http + - patch: | + - op: replace + path: /spec/acme/server + value: https://acme-v02.api.letsencrypt.org/directory + target: + kind: ClusterIssuer + name: letsencrypt-http-gwapi decryption: provider: sops secretRef: diff --git a/infrastructure/configs/cluster-issuers.yaml b/infrastructure/configs/cluster-issuers.yaml @@ -23,7 +23,21 @@ # ingress: # ingressClassName: traefik # serviceType: ClusterIP - +--- +apiVersion: gateway.networking.k8s.io/v1 +kind: Gateway +metadata: + name: cert-manager + namespace: cert-manager +spec: + gatewayClassName: cilium + listeners: + - name: http + protocol: HTTP + port: 80 + allowedRoutes: + namespaces: + from: All --- apiVersion: cert-manager.io/v1 kind: ClusterIssuer @@ -42,4 +56,23 @@ spec: ingressClassName: traefik serviceType: ClusterIP --- +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: letsencrypt-http-gwapi +spec: + acme: + email: info@nordgedanken.dev + # The server is replaced in /clusters/production/infrastructure.yaml + server: https://acme-staging-v02.api.letsencrypt.org/directory + privateKeySecretRef: + name: letsencrypt-dns-account-key + solvers: + - http01: + gatewayHTTPRoute: + parentRefs: + - name: cert-manager + namespace: cert-manager + kind: Gateway +--- # Fix for flux