Skip to content
Toggle navigation
Toggle navigation
This project
Loading...
Sign in
brainfood
/
k8s-helmfiles
Go to a project
Toggle navigation
Toggle navigation pinning
Projects
Groups
Snippets
Help
Project
Activity
Repository
Pipelines
Graphs
Issues
0
Merge Requests
0
Wiki
Network
Create a new issue
Builds
Commits
Issue Boards
Files
Commits
Network
Compare
Branches
Tags
fc643fa9
authored
2022-09-06 12:49:36 -0500
by
Adam Heath
Browse Files
Options
Browse Files
Tag
Download
Email Patches
Plain Diff
Remove letsencrypt support in cert-manager namespace.
1 parent
93a003a9
Hide whitespace changes
Inline
Side-by-side
Showing
4 changed files
with
0 additions
and
108 deletions
cert-manager/charts/cluster-issuer/kustomization.yaml
cert-manager/charts/cluster-issuer/letsencrypt.yaml
cert-manager/environments/default-values.yaml
cert-manager/helmfile.yaml
cert-manager/charts/cluster-issuer/kustomization.yaml
View file @
fc643fa
...
...
@@ -3,5 +3,4 @@ kind: Kustomization
resources
:
-
./cluster-issuer.yaml
-
./letsencrypt.yaml
...
...
cert-manager/charts/cluster-issuer/letsencrypt.yaml
deleted
100644 → 0
View file @
93a003a
apiVersion
:
v1
data
:
tls.key
:
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
kind
:
Secret
metadata
:
name
:
acme-account-key
namespace
:
cert-manager
---
apiVersion
:
cert-manager.io/v1
kind
:
ClusterIssuer
metadata
:
namespace
:
cert-manager
name
:
letsencrypt-staging
spec
:
acme
:
# You must replace this email address with your own.
# Let's Encrypt will use this to contact you about expiring
# certificates, and issues related to your account.
#email: user@example.com
email
:
name@example.com
server
:
https://acme-staging-v02.api.letsencrypt.org/directory
preferredChain
:
'
ISRG
Root
X1'
disableAccountKeyGeneration
:
true
privateKeySecretRef
:
# Secret resource that will be used to store the account's private key.
name
:
acme-account-key
# Add a single challenge solver, HTTP01 using istio
solvers
:
-
http01
:
ingress
:
class
:
istio
---
apiVersion
:
cert-manager.io/v1
kind
:
ClusterIssuer
metadata
:
name
:
letsencrypt-production
namespace
:
cert-manager
spec
:
acme
:
# You must replace this email address with your own.
# Let's Encrypt will use this to contact you about expiring
# certificates, and issues related to your account.
#email: user@example.com
email
:
name@example.com
server
:
https://acme-v02.api.letsencrypt.org/directory
preferredChain
:
'
ISRG
Root
X1'
disableAccountKeyGeneration
:
true
privateKeySecretRef
:
# Secret resource that will be used to store the account's private key.
name
:
acme-account-key
# Add a single challenge solver, HTTP01 using istio
solvers
:
-
http01
:
ingress
:
class
:
istio
cert-manager/environments/default-values.yaml
View file @
fc643fa
...
...
@@ -3,14 +3,6 @@ clusterIssuer:
strategicMergePatches
:
[]
caIssuer
:
secretName
:
root-ca
letsencrypt
:
enabled
:
true
email
:
name@example.com
tls_key
:
replace-me
solvers
:
-
http01
:
ingress
:
class
:
istio
root-ca
:
crt
:
null
key
:
null
...
...
cert-manager/helmfile.yaml
View file @
fc643fa
...
...
@@ -48,47 +48,3 @@ releases:
spec
:
ca
:
secretName
:
{{
.Values.clusterIssuer.caIssuer.secretName
}}
-
apiVersion
:
v1
kind
:
Secret
metadata
:
namespace
:
cert-manager
name
:
acme-account-key
{{
- if .Values.clusterIssuer.letsencrypt.enabled
}}
data
:
tls.key
:
{{
.Values.clusterIssuer.letsencrypt.tls_key
}}
{{
- else
}}
$patch
:
delete
{{
- end
}}
-
apiVersion
:
cert-manager.io/v1
kind
:
ClusterIssuer
metadata
:
namespace
:
cert-manager
name
:
letsencrypt-staging
{{
- if .Values.clusterIssuer.letsencrypt.enabled
}}
spec
:
acme
:
email
:
{{
.Values.clusterIssuer.letsencrypt.email
}}
{{
- if .Values.clusterIssuer.letsencrypt.solvers
}}
solvers
:
{{
.Values.clusterIssuer.letsencrypt.solvers | toYaml | nindent 14
}}
{{
- end
}}
{{
- else
}}
$patch
:
delete
{{
- end
}}
-
apiVersion
:
cert-manager.io/v1
kind
:
ClusterIssuer
metadata
:
namespace
:
cert-manager
name
:
letsencrypt-production
{{
- if .Values.clusterIssuer.letsencrypt.enabled
}}
spec
:
acme
:
email
:
{{
.Values.clusterIssuer.letsencrypt.email
}}
{{
- if .Values.clusterIssuer.letsencrypt.solvers
}}
solvers
:
{{
.Values.clusterIssuer.letsencrypt.solvers | toYaml | nindent 14
}}
{{
- end
}}
{{
- else
}}
$patch
:
delete
{{
- end
}}
{{
- if not (empty (.Values.clusterIssuer.strategicMergePatches))
}}
{{
- .Values.clusterIssuer.strategicMergePatches | toYaml | indent 6
}}
{{
- end
}}
...
...
Please
register
or
sign in
to post a comment