helmfile.yaml
3.87 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
bases:
- ../common/environments.yaml
---
releases:
- name: {{ .Values.name }}-gateway
chart: charts/gateway
namespace: {{ .Values.namespace }}
values:
- namePrefix: "{{ .Values.name }}-"
jsonPatches:
- target:
version: v1
group: cert-manager.io
kind: Certificate
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-exact-cert
patch:
- op: replace
path: /spec/dnsNames
value:
- {{ .Values.base.domain }}
- target:
version: v1
group: cert-manager.io
kind: Certificate
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-subs-cert
patch:
- op: replace
path: /spec/dnsNames
value: {{ .Values.sub.domains | toYaml | nindent 14 }}
- target:
version: v1beta1
group: gateway.networking.k8s.io
kind: Gateway
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-gateway
patch:
- op: replace
path: /spec/gatewayClassName
value: {{ .Values.gatewayClassName }}
- op: replace
path: /spec/listeners/1/hostname
value: {{ .Values.base.domain }}
- op: replace
path: /spec/listeners/1/tls/certificateRefs/0/name
value: {{ .Values.name }}-exact-cert
- op: replace
path: /spec/listeners/2/hostname
value: "*.{{ .Values.base.domain }}"
- op: replace
path: /spec/listeners/2/tls/certificateRefs/0/name
value: {{ .Values.name }}-subs-cert
- target:
version: v1
group: cert-manager.io
kind: Issuer
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-letsencrypt-staging
patch:
- op: replace
path: /spec/acme/solvers/0/http01/gatewayHTTPRoute/parentRefs/0/name
value: {{ .Values.name }}-gateway
- target:
version: v1
group: cert-manager.io
kind: Issuer
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-letsencrypt-production
patch:
- op: replace
path: /spec/acme/solvers/0/http01/gatewayHTTPRoute/parentRefs/0/name
value: {{ .Values.name }}-gateway
strategicMergePatches:
- apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-exact-cert
spec:
issuerRef:
name: {{ .Values.name }}-letsencrypt-staging
secretName: {{ .Values.name }}-exact-cert
secretTemplate: {{ .Values.base.secretTemplate | toYaml | nindent 12 }}
- apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-subs-cert
spec:
issuerRef:
name: {{ .Values.name }}-letsencrypt-staging
secretName: {{ .Values.name }}-subs-cert
secretTemplate: {{ .Values.sub.secretTemplate | toYaml | nindent 12 }}
- apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-letsencrypt-staging
spec:
acme:
email: {{ .Values.letsEncrypt.email }}
privateKeySecretRef:
name: {{ .Values.name }}-letsencrypt-account
- apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
namespace: {{ .Values.namespace }}
name: {{ .Values.name }}-letsencrypt-production
spec:
acme:
email: {{ .Values.letsEncrypt.email }}
privateKeySecretRef:
name: {{ .Values.name }}-letsencrypt-account