Simon Kaiser пре 3 година
родитељ
комит
c95f235f7f

+ 68
- 0
gitops-kaisers-info/templates/cert-manager.yaml Прегледај датотеку

1
+apiVersion: argoproj.io/v1alpha1
2
+kind: Application
3
+metadata:
4
+  name: cert-manager
5
+  namespace: {{ .Values.spec.namespace }}
6
+  finalizers:
7
+  - resources-finalizer.argocd.argoproj.io
8
+spec:
9
+  destination:
10
+    namespace: cert-manager
11
+    name: {{ .Values.spec.destination.name }}
12
+  project: {{ .Values.spec.project }}
13
+  syncPolicy:
14
+    automated:
15
+      prune: true
16
+      selfHeal: true
17
+  source:
18
+    chart: cert-manager
19
+    repoURL: https://charts.jetstack.io
20
+    targetRevision: 1.7.1
21
+    helm:
22
+      releaseName: cert-manager
23
+---
24
+apiVersion: cert-manager.io/v1
25
+kind: ClusterIssuer
26
+metadata:
27
+  name: letsencrypt-staging
28
+  namespace: cert-manager
29
+spec:
30
+  acme:
31
+    email: "admin@kaisers.info" # replace this
32
+    privateKeySecretRef:
33
+      name: "staging-issuer-account-key"
34
+    server: "https://acme-staging-v02.api.letsencrypt.org/directory"
35
+    solvers:
36
+      - http01:
37
+          ingress:
38
+            class: "traefik"
39
+            ingressTemplate:
40
+              metadata:
41
+                annotations:
42
+                  kubernetes.io/ingress.class: "traefik"
43
+#                  traefik.ingress.kubernetes.io/router.tls: "true"
44
+#                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
45
+#                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
46
+---
47
+apiVersion: cert-manager.io/v1
48
+kind: ClusterIssuer
49
+metadata:
50
+  name: letsencrypt-prod
51
+  namespace: cert-manager
52
+spec:
53
+  acme:
54
+    email: "admin@kaisers.info" # replace this
55
+    privateKeySecretRef:
56
+      name: "prod-issuer-account-key"
57
+    server: "https://acme-v02.api.letsencrypt.org/directory"
58
+    solvers:
59
+      - http01:
60
+          ingress:
61
+            class: "traefik"
62
+            ingressTemplate:
63
+              metadata:
64
+                annotations:
65
+                  kubernetes.io/ingress.class: "traefik"
66
+                  traefik.ingress.kubernetes.io/router.tls: "true"
67
+                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
68
+                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

+ 0
- 7
gitops-kaisers-info/templates/namespaces.yaml Прегледај датотеку

21
 ---
21
 ---
22
 apiVersion: v1
22
 apiVersion: v1
23
 kind: Namespace
23
 kind: Namespace
24
-metadata:
25
-  name: authentik
26
-  annotations:
27
-    argocd.argoproj.io/sync-wave: "-1"
28
----
29
-apiVersion: v1
30
-kind: Namespace
31
 metadata:
24
 metadata:
32
   name: cert-manager
25
   name: cert-manager
33
   annotations:
26
   annotations:

+ 23
- 0
services-kaisers-info/Chart.yaml Прегледај датотеку

1
+apiVersion: v2
2
+name: services-kaisers-info
3
+description: Applications
4
+
5
+# A chart can be either an 'application' or a 'library' chart.
6
+#
7
+# Application charts are a collection of templates that can be packaged into versioned archives
8
+# to be deployed.
9
+#
10
+# Library charts provide useful utilities or functions for the chart developer. They're included as
11
+# a dependency of application charts to inject those utilities and functions into the rendering
12
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
13
+type: application
14
+
15
+# This is the chart version. This version number should be incremented each time you make changes
16
+# to the chart and its templates, including the app version.
17
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
18
+version: 0.1.0
19
+
20
+# This is the version number of the application being deployed. This version number should be
21
+# incremented each time you make changes to the application. Versions are not expected to
22
+# follow Semantic Versioning. They should reflect the version the application is using.
23
+appVersion: "0.1.0"

gitops-kaisers-info/templates/authentik.yaml → services-kaisers-info/templates/authentik.yaml Прегледај датотеку


+ 6
- 0
services-kaisers-info/templates/namespaces.yaml Прегледај датотеку

1
+apiVersion: v1
2
+kind: Namespace
3
+metadata:
4
+  name: authentik
5
+  annotations:
6
+    argocd.argoproj.io/sync-wave: "-1"

+ 13
- 0
services-kaisers-info/values.yaml Прегледај датотеку

1
+spec:
2
+  destination:
3
+    name: in-cluster
4
+  source:
5
+    path: gitops-kaisers-info
6
+    repoURL: https://git.kaisers.info/simonkaiser/k8s-kaisers-info.git
7
+    targetRevision: master
8
+  project: services-kaisers-info
9
+  namespace: argocd
10
+  syncPolicy:
11
+    automated:
12
+      prune: true
13
+      selfHeal: true