Compare commits

..

8 commits

Author SHA1 Message Date
Renovate bot
8963c7ddb2 Update Helm release external-dns to v8 2025-02-06 00:00:49 +00:00
c1f9a47dc4 Remove secretref to use wildcard - first real test
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-02-04 17:02:08 +00:00
2f7fa56b56 Use the wildcard cert in ingress-nginx
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-02-04 16:03:21 +00:00
40e21872dd Oops, namespace
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-02-04 16:00:22 +00:00
dce160c4e8 Add the wildcard certificate
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-02-04 15:59:06 +00:00
5aaafaefad Add cluster wildcard
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-02-04 15:57:52 +00:00
0078707c38 User token needs an account ID
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-02-04 15:11:35 +00:00
bb71a6a6b7 Dnsimple hook without secret, let us see
Signed-off-by: Martyn Ranyard <m@rtyn.berlin>
2025-02-04 12:50:25 +00:00
7 changed files with 63 additions and 2 deletions

View file

@ -4,7 +4,7 @@ kind: Kustomization
helmCharts:
- name: external-dns
repo: https://charts.bitnami.com/bitnami
version: 8.7.3
version: 8.7.4
releaseName: external-dns
namespace: external-dns
valuesInline:

View file

@ -29,4 +29,3 @@ spec:
tls:
- hosts:
- videos.martyn.berlin
secretName: peertube-tls-cert

View file

@ -0,0 +1,11 @@
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: wildcard
spec:
dnsNames:
- "*.martyn.berlin"
issuerRef:
kind: ClusterIssuer
name: dnsimple-cert-manager-webhook-cert-manager-webhook-dnsimple-production
secretName: cluster-ingress-wildcard

View file

@ -22,6 +22,8 @@ spec:
value: "35m"
- name: controller.resources.requests.memory
value: "351198544"
- name: controller.extraArgs.default-ssl-certificate
value: "cluster-ingress/cluster-ingress-wildcard"
syncPolicy:
automated:
selfHeal: true

View file

@ -0,0 +1,31 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: dnsimple-cert-manager-webhook
namespace: argocd
spec:
destination:
namespace: cert-manager
server: https://kubernetes.default.svc
project: infra
source:
chart: cert-manager-webhook-dnsimple
helm:
parameters:
- name: clusterIssuer.production.enabled
value: "true"
- name: clusterIssuer.staging.enabled
value: "true"
- name: clusterIssuer.email
value: "ranuardm@gmail.com"
- name: dnsimple.existingTokenSecret
value: "true"
- name: dnsimple.tokenSecretName
value: "dnsimple-webhook-secret"
- name: dnsimple.accountID
value: "106218"
repoURL: https://puzzle.github.io/cert-manager-webhook-dnsimple
targetRevision: 0.1.6
syncPolicy:
automated:
selfHeal: true

View file

@ -37,3 +37,4 @@ spec:
- https://charts.gabe565.com
- https://charts.longhorn.io
- https://git.deuxfleurs.fr/Deuxfleurs/garage
- https://puzzle.github.io/cert-manager-webhook-dnsimple

View file

@ -0,0 +1,17 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: wildcard
namespace: argocd
spec:
destination:
namespace: cluster-ingress
server: https://kubernetes.default.svc
project: infra
source:
path: apps-kustomized/wildcard
repoURL: https://git.martyn.berlin/martyn/infra4talos
targetRevision: HEAD
syncPolicy:
automated:
selfHeal: true