Commit b1ea464c authored by Kevin Di Lallo's avatar Kevin Di Lallo
Browse files

split prod & staging cluster issuers + added path to letsencrypt ingress

parent af87c201

charts/meep-ingress-certs/templates/le-cluster-issuer.yaml

+18 −5
Original line number Diff line number Diff line 
{{- if .Values.letsEncrypt.enabled }}

{{- if .Values.letsEncrypt.acme.prod }}

apiVersion: cert-manager.io/v1

kind: ClusterIssuer

metadata:

  name: {{ .Values.letsEncrypt.issuer }}

  name: {{ .Values.letsEncrypt.issuer }}-prod

spec:

  acme:

    {{- if .Values.letsEncrypt.acme.prod }}

    server: {{ .Values.letsEncrypt.acme.prodServer }}

    email: AdvantEDGE@InterDigital.com

    privateKeySecretRef:

      name: letsencrypt-prod

    solvers:

    - http01:

        ingress:

          class: nginx

{{- else }}

apiVersion: cert-manager.io/v1

kind: ClusterIssuer

metadata:

  name: {{ .Values.letsEncrypt.issuer }}-staging

spec:

  acme:

    server: {{ .Values.letsEncrypt.acme.stagingServer }}

    {{- end }}

    email: AdvantEDGE@InterDigital.com

    privateKeySecretRef:

      name: letsencrypt

      name: letsencrypt-staging

    solvers:

    - http01:

        ingress:

          class: nginx

{{- end }}

{{- end }}

charts/meep-ingress-certs/templates/le-ingress.yaml

+15 −7
Original line number Diff line number Diff line
@@ -2,15 +2,23 @@ 
apiVersion: extensions/v1beta1

kind: Ingress

metadata:

  name: {{ template "meep-ingress-certs.fullname" . }}-le

  name: {{ template "meep-ingress-certs.fullname" . }}

  labels:

    app: {{ template "meep-ingress-certs.name" . }}-le

    app: {{ template "meep-ingress-certs.name" . }}

    chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}

    release: {{ .Release.Name }}

    heritage: {{ .Release.Service }}

  annotations:

    cert-manager.io/cluster-issuer: {{ .Values.letsEncrypt.issuer }}

    {{- if .Values.letsEncrypt.acme.prod }}

    cert-manager.io/cluster-issuer: {{ .Values.letsEncrypt.issuer }}-prod

    {{- else }}

    cert-manager.io/cluster-issuer: {{ .Values.letsEncrypt.issuer }}-staging

    {{- end }}

spec:

  rules:

    - http:

        paths:

          - path: "/letsencrypt/"

            backend:

              serviceName: {{ .Values.letsEncrypt.defaultBackend.service.name }}

              servicePort: {{ .Values.letsEncrypt.defaultBackend.service.port }}