Rename several

- mailserver.human-connection  —>  mail.ocelot.social
- letsencrypt-staging  —>  letsencrypt-develop
- letsencrypt-prod  —>  letsencrypt-production
- Renamed files.
This commit is contained in:
Wolfgang Huß 2020-12-03 17:15:44 +01:00
parent d92c5c5356
commit ea27a1bddc
8 changed files with 19 additions and 21 deletions

View File

@ -53,7 +53,7 @@ $ kubectl describe --namespace=human-connection certificate tls
$ kubectl describe --namespace=human-connection secret tls $ kubectl describe --namespace=human-connection secret tls
``` ```
If everything looks good, update the issuer of your ingress. Change the annotation `certmanager.k8s.io/issuer` from `letsencrypt-staging` to `letsencrypt-prod` in your ingress configuration in `ingress.yaml`. If everything looks good, update the issuer of your ingress. Change the annotation `certmanager.k8s.io/issuer` from `letsencrypt-develop` to `letsencrypt-production` in your ingress configuration in `ingress.yaml`.
```bash ```bash
# in folder deployment/digital-ocean/https/ # in folder deployment/digital-ocean/https/

View File

@ -5,24 +5,23 @@ metadata:
namespace: ocelot-social namespace: ocelot-social
annotations: annotations:
kubernetes.io/ingress.class: "nginx" kubernetes.io/ingress.class: "nginx"
certmanager.k8s.io/issuer: "letsencrypt-staging" certmanager.k8s.io/issuer: "letsencrypt-develop"
certmanager.k8s.io/acme-challenge-type: http01 certmanager.k8s.io/acme-challenge-type: http01
nginx.ingress.kubernetes.io/proxy-body-size: 6m nginx.ingress.kubernetes.io/proxy-body-size: 6m
spec: spec:
tls: tls:
- hosts: - hosts:
# - nitro-mailserver.human-connection.org - develop-k8s.ocelot.social
- develop.human-connection.org
secretName: tls secretName: tls
rules: rules:
- host: develop.human-connection.org - host: develop-k8s.ocelot.social
http: http:
paths: paths:
- path: / - path: /
backend: backend:
serviceName: web serviceName: web
servicePort: 3000 servicePort: 3000
- host: mailserver.human-connection.org - host: mail.ocelot.social
http: http:
paths: paths:
- path: / - path: /

View File

@ -2,7 +2,7 @@
apiVersion: certmanager.k8s.io/v1alpha1 apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer kind: Issuer
metadata: metadata:
name: letsencrypt-staging name: letsencrypt-develop
namespace: ocelot-social namespace: ocelot-social
spec: spec:
acme: acme:
@ -12,14 +12,14 @@
email: user@example.com email: user@example.com
# Name of a secret used to store the ACME account private key # Name of a secret used to store the ACME account private key
privateKeySecretRef: privateKeySecretRef:
name: letsencrypt-staging name: letsencrypt-develop
# Enable the HTTP-01 challenge provider # Enable the HTTP-01 challenge provider
http01: {} http01: {}
--- ---
apiVersion: certmanager.k8s.io/v1alpha1 apiVersion: certmanager.k8s.io/v1alpha1
kind: Issuer kind: Issuer
metadata: metadata:
name: letsencrypt-prod name: letsencrypt-production
namespace: ocelot-social namespace: ocelot-social
spec: spec:
acme: acme:
@ -29,6 +29,6 @@
email: user@example.com email: user@example.com
# Name of a secret used to store the ACME account private key # Name of a secret used to store the ACME account private key
privateKeySecretRef: privateKeySecretRef:
name: letsencrypt-prod name: letsencrypt-production
# Enable the HTTP-01 challenge provider # Enable the HTTP-01 challenge provider
http01: {} http01: {}

View File

@ -1,7 +1,7 @@
apiVersion: cert-manager.io/v1alpha2 apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer kind: ClusterIssuer
metadata: metadata:
name: letsencrypt-staging name: letsencrypt-develop
labels: labels:
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }} app.kubernetes.io/managed-by: {{ .Release.Service }}
@ -13,7 +13,7 @@ spec:
server: https://acme-staging-v02.api.letsencrypt.org/directory server: https://acme-staging-v02.api.letsencrypt.org/directory
email: {{ .Values.supportEmail }} email: {{ .Values.supportEmail }}
privateKeySecretRef: privateKeySecretRef:
name: letsencrypt-staging name: letsencrypt-develop
solvers: solvers:
- http01: - http01:
ingress: ingress:

View File

@ -1,7 +1,7 @@
apiVersion: cert-manager.io/v1alpha2 apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer kind: ClusterIssuer
metadata: metadata:
name: letsencrypt-prod name: letsencrypt-production
labels: labels:
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }} app.kubernetes.io/managed-by: {{ .Release.Service }}
@ -13,7 +13,7 @@ spec:
server: https://acme-v02.api.letsencrypt.org/directory server: https://acme-v02.api.letsencrypt.org/directory
email: {{ .Values.supportEmail }} email: {{ .Values.supportEmail }}
privateKeySecretRef: privateKeySecretRef:
name: letsencrypt-prod name: letsencrypt-production
solvers: solvers:
- http01: - http01:
ingress: ingress:

View File

@ -19,7 +19,7 @@ image:
# pullPolicy indicates when, if ever, pods pull a new image from docker hub. # pullPolicy indicates when, if ever, pods pull a new image from docker hub.
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# letsencryptIssuer is used by cert-manager to set up certificates with the given provider. # letsencryptIssuer is used by cert-manager to set up certificates with the given provider.
letsencryptIssuer: "letsencrypt-prod" letsencryptIssuer: "letsencrypt-production"
# neo4jConfig changes any default neo4j config/adds it. # neo4jConfig changes any default neo4j config/adds it.
neo4jConfig: neo4jConfig:
# acceptLicenseAgreement is used to agree to the license agreement for neo4j's enterprise edition. # acceptLicenseAgreement is used to agree to the license agreement for neo4j's enterprise edition.

View File

@ -2,7 +2,7 @@
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
data: data:
SMTP_HOST: "mailserver.human-connection" SMTP_HOST: "mail.ocelot.social"
SMTP_PORT: "25" SMTP_PORT: "25"
GRAPHQL_URI: "http://backend.human-connection:4000" GRAPHQL_URI: "http://backend.human-connection:4000"
NEO4J_URI: "bolt://neo4j.human-connection:7687" NEO4J_URI: "bolt://neo4j.human-connection:7687"

View File

@ -2,13 +2,12 @@ apiVersion: v1
kind: Secret kind: Secret
data: data:
JWT_SECRET: "Yi8mJjdiNzhCRiZmdi9WZA==" JWT_SECRET: "Yi8mJjdiNzhCRiZmdi9WZA=="
MONGODB_PASSWORD: "TU9OR09EQl9QQVNTV09SRA=="
PRIVATE_KEY_PASSPHRASE: "YTdkc2Y3OHNhZGc4N2FkODdzZmFnc2FkZzc4" PRIVATE_KEY_PASSPHRASE: "YTdkc2Y3OHNhZGc4N2FkODdzZmFnc2FkZzc4"
MAPBOX_TOKEN: "cGsuZXlKMUlqb2lhSFZ0WVc0dFkyOXVibVZqZEdsdmJpSXNJbUVpT2lKamFqbDBjbkJ1Ykdvd2VUVmxNM1Z3WjJsek5UTnVkM1p0SW4wLktaOEtLOWw3MG9talhiRWtrYkhHc1EK" MAPBOX_TOKEN: "pk.eyJ1IjoiYnVzZmFrdG9yIiwiYSI6ImNraDNiM3JxcDBhaWQydG1uczhpZWtpOW4ifQ.7TNRTO-o9aK1Y6MyW_Nd4g"
SMTP_USERNAME:
SMTP_PASSWORD:
NEO4J_USERNAME: NEO4J_USERNAME:
NEO4J_PASSWORD: NEO4J_PASSWORD:
SMTP_USERNAME:
SMTP_PASSWORD:
metadata: metadata:
name: ocelot-social name: ocelot-social
namespace: human-connection namespace: ocelot-social