rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge commit 'fe564d72279f4ab061b961dd528623f0ed272667' as 'cluster-config'

Browse Source
This commit is contained in:
Ryan Blundon
2025-03-30 15:46:16 -05:00
parent 68785684d5 fe564d7227
commit d76d8f8e05
346 changed files with 11754 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cluster-config/components/cert-manager-operator/aggregate/overlays/letsencrypt/kustomization.yaml Normal file
View File

@@ -0,0 +1,4 @@
resources:
- ../../../operator/base
- ../../../instance/base
- ../../../issuers/letsencrypt-route53/base

15
cluster-config/components/cert-manager-operator/instance/base/certmanager.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: operator.openshift.io/v1alpha1
kind: CertManager
metadata:
annotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
name: cluster
spec:
logLevel: Normal
managementState: Managed
observedConfig: null
operatorLogLevel: Normal
controllerConfig:
overrideArgs:
- '--dns01-recursive-nameservers=8.8.8.8:53,8.8.4.4:53'
- '--dns01-recursive-nameservers-only'

2
cluster-config/components/cert-manager-operator/instance/base/kustomization.yaml Normal file
View File

@@ -0,0 +1,2 @@
resources:
- certmanager.yaml

4
cluster-config/components/cert-manager-operator/issuers/letsencrypt-route53/base/cert-manager-ns.yaml Normal file
View File

@@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: cert-manager

11
cluster-config/components/cert-manager-operator/issuers/letsencrypt-route53/base/kustomization.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
commonAnnotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
resources:
- cert-manager-ns.yaml
- letsencrypt-aws-external.yaml
- letsencrypt-staging-cluster-issuer.yaml
- letsencrypt-prod-cluster-issuer.yaml

15
cluster-config/components/cert-manager-operator/issuers/letsencrypt-route53/base/letsencrypt-aws-external.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: letsencrypt-aws
namespace: cert-manager
spec:
secretStoreRef:
kind: ClusterSecretStore
name: doppler-cluster
target:
name: letsencrypt-aws
data:
- secretKey: secret-access-key
remoteRef:
key: AWS_LETSENCRYPT

23
cluster-config/components/cert-manager-operator/issuers/letsencrypt-route53/base/letsencrypt-prod-cluster-issuer.yaml Normal file
View File

@@ -0,0 +1,23 @@
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: gnunn@redhat.com
# This key doesn't exist, cert-manager creates it
privateKeySecretRef:
name: gnunn-redhat-issuer-account-key
solvers:
- selector:
dnsZones:
- "ocplab.com"
dns01:
route53:
region: ca-central-1
accessKeyID: AKIAVW7HGAZVWLIKXRCA
hostedZoneID: Z1LKUX3GLO9GW9
secretAccessKeySecretRef:
name: letsencrypt-aws
key: secret-access-key

23
cluster-config/components/cert-manager-operator/issuers/letsencrypt-route53/base/letsencrypt-staging-cluster-issuer.yaml Normal file
View File

@@ -0,0 +1,23 @@
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
spec:
acme:
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: gnunn@redhat.com
# This key doesn't exist, cert-manager creates it
privateKeySecretRef:
name: gnunn-redhat-issuer-account-key
solvers:
- selector:
dnsZones:
- "ocplab.com"
dns01:
route53:
region: ca-central-1
accessKeyID: AKIAVW7HGAZVWLIKXRCA
hostedZoneID: Z1LKUX3GLO9GW9
secretAccessKeySecretRef:
name: letsencrypt-aws
key: secret-access-key

12
cluster-config/components/cert-manager-operator/operator/base/kustomization.yaml Normal file
View File

@@ -0,0 +1,12 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
commonAnnotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
namespace: cert-manager-operator
resources:
- operator-namespace.yaml
- operator-group.yaml
- subscription.yaml

8
cluster-config/components/cert-manager-operator/operator/base/operator-group.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
name: openshift-cert-manager-operator
spec:
targetNamespaces:
- cert-manager-operator
upgradeStrategy: Default

8
cluster-config/components/cert-manager-operator/operator/base/operator-namespace.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: v1
kind: Namespace
metadata:
annotations:
openshift.io/display-name: Red Hat Certificate Manager Operator
labels:
openshift.io/cluster-monitoring: 'true'
name: cert-manager-operator

10
cluster-config/components/cert-manager-operator/operator/base/subscription.yaml Normal file
View File

@@ -0,0 +1,10 @@
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
name: openshift-cert-manager-operator
spec:
channel: stable-v1
installPlanApproval: Automatic
name: openshift-cert-manager-operator
source: redhat-operators
sourceNamespace: openshift-marketplace