92 lines
2.0 KiB
YAML
92 lines
2.0 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: cert-manager
|
|
namespace: argo-cd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: cert-manager
|
|
project: default
|
|
source:
|
|
chart: cert-manager
|
|
helm:
|
|
values: |
|
|
|
|
prometheus:
|
|
enabled: false
|
|
|
|
extraArgs:
|
|
- --enable-certificate-owner-ref=true
|
|
|
|
repoURL: https://charts.jetstack.io
|
|
targetRevision: 1.10.1
|
|
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: roxedus.com-cloudflare
|
|
namespace: cert-manager
|
|
spec:
|
|
acme:
|
|
server: https://acme-staging-v02.api.letsencrypt.org/directory
|
|
privateKeySecretRef:
|
|
name: cloudflare-issuer-account-key
|
|
solvers:
|
|
- dns01:
|
|
ingress:
|
|
class: traefik
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: cloudflare-api-token-secret
|
|
key: CLOUDFLARE_API_KEY
|
|
selector:
|
|
dnsNames:
|
|
- 'roxedus.com'
|
|
- '*.roxedus.com'
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: test-roxedus-com
|
|
namespace: default
|
|
spec:
|
|
# Secret names are always required.
|
|
secretName: example-com-tls
|
|
commonName: test.roxedus.com
|
|
dnsNames:
|
|
- test.roxedus.com
|
|
issuerRef:
|
|
name: roxedus.com-cloudflare
|
|
# We can reference ClusterIssuers by changing the kind here.
|
|
# The default value is Issuer (i.e. a locally namespaced Issuer)
|
|
kind: ClusterIssuer
|
|
---
|
|
apiVersion: extensions/v1beta1
|
|
kind: Ingress
|
|
metadata:
|
|
annotations:
|
|
certmanager.k8s.io/acme-challenge-type: dns01
|
|
certmanager.k8s.io/cluster-issuer: test-roxedus-com
|
|
name: ingress-rule
|
|
namespace: default
|
|
spec:
|
|
rules:
|
|
- host: hostname
|
|
http:
|
|
paths:
|
|
- backend:
|
|
serviceName: backend-service
|
|
servicePort: 8080
|
|
tls:
|
|
- hosts:
|
|
- test.roxedus.com
|
|
secretName: test-roxedus-com |