mirror of
https://github.com/bvanroll/environment-ff-stage-euw1-gkecluster-primary-dev.git
synced 2025-08-29 20:12:42 +00:00
initial config based of jenkins-x/jenkins-x-boot-config with ref v1.0.82
This commit is contained in:
17
systems/acme/templates/cert-manager-prod-certificate.yaml
Normal file
17
systems/acme/templates/cert-manager-prod-certificate.yaml
Normal file
@@ -0,0 +1,17 @@
|
||||
{{- if .Values.certmanager.enabled }}
|
||||
{{- if eq .Values.certmanager.production "true" }}
|
||||
apiVersion: cert-manager.io/v1alpha2
|
||||
kind: Certificate
|
||||
metadata:
|
||||
name: "tls-{{ .Values.cluster.domain | replace "." "-" }}-p"
|
||||
labels:
|
||||
jenkins.io/letsencrypt-service: production
|
||||
spec:
|
||||
secretName: "tls-{{ .Values.cluster.domain | replace "." "-" }}-p"
|
||||
issuerRef:
|
||||
name: letsencrypt-prod
|
||||
commonName: "*.{{ .Values.cluster.domain }}"
|
||||
dnsNames:
|
||||
- "*.{{ .Values.cluster.domain }}"
|
||||
{{- end }}
|
||||
{{- end }}
|
35
systems/acme/templates/cert-manager-prod-issuer.yaml
Normal file
35
systems/acme/templates/cert-manager-prod-issuer.yaml
Normal file
@@ -0,0 +1,35 @@
|
||||
{{- if .Values.certmanager.enabled }}
|
||||
{{- if eq .Values.certmanager.production "true" }}
|
||||
apiVersion: cert-manager.io/v1alpha2
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: letsencrypt-prod
|
||||
spec:
|
||||
acme:
|
||||
server: https://acme-v02.api.letsencrypt.org/directory
|
||||
email: "{{ .Values.certmanager.email }}"
|
||||
# Name of a secret used to store the ACME account private key
|
||||
privateKeySecretRef:
|
||||
name: letsencrypt-prod
|
||||
solvers:
|
||||
- selector:
|
||||
dnsNames:
|
||||
- "*.{{ .Values.cluster.domain }}"
|
||||
- "{{ .Values.cluster.domain }}"
|
||||
# ACME DNS-01 provider configurations
|
||||
dns01:
|
||||
{{- if eq .Values.cluster.provider "gke" }}
|
||||
clouddns:
|
||||
# The project in which to update the DNS zone
|
||||
project: "{{ .Values.cluster.projectID }}"
|
||||
# A secretKeyRef to a google cloud json service account
|
||||
serviceAccountSecretRef:
|
||||
name: external-dns-gcp-sa
|
||||
key: credentials.json
|
||||
{{- end }}
|
||||
{{- if eq .Values.cluster.provider "eks" }}
|
||||
route53:
|
||||
region: {{ .Values.cluster.region }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
17
systems/acme/templates/cert-manager-staging-certificate.yaml
Normal file
17
systems/acme/templates/cert-manager-staging-certificate.yaml
Normal file
@@ -0,0 +1,17 @@
|
||||
{{- if .Values.certmanager.enabled }}
|
||||
{{- if eq .Values.certmanager.production "false" }}
|
||||
apiVersion: cert-manager.io/v1alpha2
|
||||
kind: Certificate
|
||||
metadata:
|
||||
name: "tls-{{ .Values.cluster.domain | replace "." "-" }}-s"
|
||||
labels:
|
||||
jenkins.io/letsencrypt-service: staging
|
||||
spec:
|
||||
secretName: "tls-{{ .Values.cluster.domain | replace "." "-" }}-s"
|
||||
issuerRef:
|
||||
name: letsencrypt-staging
|
||||
commonName: "*.{{ .Values.cluster.domain }}"
|
||||
dnsNames:
|
||||
- "*.{{ .Values.cluster.domain }}"
|
||||
{{- end }}
|
||||
{{- end }}
|
35
systems/acme/templates/cert-manager-staging-issuer.yaml
Normal file
35
systems/acme/templates/cert-manager-staging-issuer.yaml
Normal file
@@ -0,0 +1,35 @@
|
||||
{{- if .Values.certmanager.enabled }}
|
||||
{{- if eq .Values.certmanager.production "false" }}
|
||||
apiVersion: cert-manager.io/v1alpha2
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: letsencrypt-staging
|
||||
spec:
|
||||
acme:
|
||||
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
||||
email: "{{ .Values.certmanager.email }}"
|
||||
# Name of a secret used to store the ACME account private key
|
||||
privateKeySecretRef:
|
||||
name: letsencrypt-staging
|
||||
solvers:
|
||||
- selector:
|
||||
dnsNames:
|
||||
- "*.{{ .Values.cluster.domain }}"
|
||||
- "{{ .Values.cluster.domain }}"
|
||||
# ACME DNS-01 provider configurations
|
||||
dns01:
|
||||
{{- if eq .Values.cluster.provider "gke" }}
|
||||
clouddns:
|
||||
# The project in which to update the DNS zone
|
||||
project: "{{ .Values.cluster.projectID }}"
|
||||
# A secretKeyRef to a google cloud json service account
|
||||
serviceAccountSecretRef:
|
||||
name: external-dns-gcp-sa
|
||||
key: credentials.json
|
||||
{{- end }}
|
||||
{{- if eq .Values.cluster.provider "eks" }}
|
||||
route53:
|
||||
region: {{ .Values.cluster.region }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
Reference in New Issue
Block a user