mirror of
https://github.com/IT4Change/Ocelot-Social.git
synced 2025-12-13 07:45:56 +00:00
Refactor ingress.yaml(s) and issuer.yaml(S)
This commit is contained in:
parent
0ffba54fde
commit
1b01d35c8d
@ -74,7 +74,7 @@ $ kubectl describe -n ocelot-social certificate tls
|
||||
$ kubectl describe -n ocelot-social secret tls
|
||||
```
|
||||
|
||||
If everything looks good, update the issuer of your ingress. Change the annotation `certmanager.k8s.io/issuer` from `letsencrypt-develop` to `letsencrypt-production` in your ingress configuration in `ingress.yaml`.
|
||||
If everything looks good, update the issuer of your ingress. Change the annotation `certmanager.k8s.io/issuer` from `letsencrypt-testing` (in the cert-manager docs named `letsencrypt-staging`) to `letsencrypt-production` in your ingress configuration in `ingress.yaml`.
|
||||
|
||||
```bash
|
||||
# in folder deployment/digital-ocean/https/
|
||||
|
||||
@ -5,7 +5,7 @@ metadata:
|
||||
namespace: ocelot-social
|
||||
annotations:
|
||||
kubernetes.io/ingress.class: "nginx"
|
||||
certmanager.k8s.io/issuer: "letsencrypt-develop"
|
||||
certmanager.k8s.io/issuer: "letsencrypt-testing"
|
||||
certmanager.k8s.io/acme-challenge-type: http01
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: 6m
|
||||
spec:
|
||||
|
||||
@ -2,17 +2,17 @@
|
||||
apiVersion: certmanager.k8s.io/v1alpha1
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: letsencrypt-develop
|
||||
name: letsencrypt-testing
|
||||
namespace: ocelot-social
|
||||
spec:
|
||||
acme:
|
||||
# The ACME server URL
|
||||
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
||||
# Email address used for ACME registration
|
||||
email: user@example.com
|
||||
email: devops@ocelot.social
|
||||
# Name of a secret used to store the ACME account private key
|
||||
privateKeySecretRef:
|
||||
name: letsencrypt-develop
|
||||
name: letsencrypt-testing
|
||||
# Enable the HTTP-01 challenge provider
|
||||
http01: {}
|
||||
---
|
||||
@ -26,7 +26,7 @@
|
||||
# The ACME server URL
|
||||
server: https://acme-v02.api.letsencrypt.org/directory
|
||||
# Email address used for ACME registration
|
||||
email: user@example.com
|
||||
email: devops@ocelot.social
|
||||
# Name of a secret used to store the ACME account private key
|
||||
privateKeySecretRef:
|
||||
name: letsencrypt-production
|
||||
|
||||
@ -1,7 +1,7 @@
|
||||
apiVersion: cert-manager.io/v1alpha2
|
||||
kind: ClusterIssuer
|
||||
metadata:
|
||||
name: letsencrypt-develop
|
||||
name: letsencrypt-testing
|
||||
labels:
|
||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
||||
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||
@ -13,7 +13,7 @@ spec:
|
||||
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
||||
email: {{ .Values.supportEmail }}
|
||||
privateKeySecretRef:
|
||||
name: letsencrypt-develop
|
||||
name: letsencrypt-testing
|
||||
solvers:
|
||||
- http01:
|
||||
ingress:
|
||||
Loading…
x
Reference in New Issue
Block a user