rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Squashed 'cluster-config/' content from commit 654f2390

Browse Source 
git-subtree-dir: cluster-config
git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c
This commit is contained in:
Ryan Blundon
2025-03-30 15:46:16 -05:00
commit fe564d7227
346 changed files with 11754 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
components/cert-manager-operator/issuers/letsencrypt-route53/base/cert-manager-ns.yaml Normal file
View File

@@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: cert-manager

11
components/cert-manager-operator/issuers/letsencrypt-route53/base/kustomization.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
commonAnnotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
resources:
- cert-manager-ns.yaml
- letsencrypt-aws-external.yaml
- letsencrypt-staging-cluster-issuer.yaml
- letsencrypt-prod-cluster-issuer.yaml

15
components/cert-manager-operator/issuers/letsencrypt-route53/base/letsencrypt-aws-external.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: letsencrypt-aws
namespace: cert-manager
spec:
secretStoreRef:
kind: ClusterSecretStore
name: doppler-cluster
target:
name: letsencrypt-aws
data:
- secretKey: secret-access-key
remoteRef:
key: AWS_LETSENCRYPT

23
components/cert-manager-operator/issuers/letsencrypt-route53/base/letsencrypt-prod-cluster-issuer.yaml Normal file
View File

@@ -0,0 +1,23 @@
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: gnunn@redhat.com
# This key doesn't exist, cert-manager creates it
privateKeySecretRef:
name: gnunn-redhat-issuer-account-key
solvers:
- selector:
dnsZones:
- "ocplab.com"
dns01:
route53:
region: ca-central-1
accessKeyID: AKIAVW7HGAZVWLIKXRCA
hostedZoneID: Z1LKUX3GLO9GW9
secretAccessKeySecretRef:
name: letsencrypt-aws
key: secret-access-key

23
components/cert-manager-operator/issuers/letsencrypt-route53/base/letsencrypt-staging-cluster-issuer.yaml Normal file
View File

@@ -0,0 +1,23 @@
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
spec:
acme:
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: gnunn@redhat.com
# This key doesn't exist, cert-manager creates it
privateKeySecretRef:
name: gnunn-redhat-issuer-account-key
solvers:
- selector:
dnsZones:
- "ocplab.com"
dns01:
route53:
region: ca-central-1
accessKeyID: AKIAVW7HGAZVWLIKXRCA
hostedZoneID: Z1LKUX3GLO9GW9
secretAccessKeySecretRef:
name: letsencrypt-aws
key: secret-access-key