enable ingress cert

2025-05-14 16:14:14 -05:00
parent d237978826
commit 0449e0030d
16 changed files with 61 additions and 4 deletions
--- a/cluster/cert-manager/templates/certs/api-server.yaml
+++ b/cluster/cert-manager/templates/certs/api-server.yaml
@@ -0,0 +1,30 @@
+{{- if and .Values.le.prod.enabled .Values.le.apiCert.enabled -}}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: okd-api
+  namespace: openshift-config
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  dnsNames:
+  - api.{{ .Values.cluster_name }}.{{ .Values.base_domain }}
+  issuerRef:
+    group: cert-manager.io
+    kind: ClusterIssuer
+    name: le-prod
+  secretName: okd-api
+---
+apiVersion: config.openshift.io/v1
+kind: APIServer
+metadata:
+  name: cluster
+spec:
+  servingCerts:
+    namedCertificates:
+    - names:
+      - api.{{ .Values.cluster_name }}.{{ .Values.base_domain }}
+      servingCertificate:
+        name: okd-api
+{{- end }}