Aleksandr BogomiakovandClaude
6d39028e2f
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 17s
Co-Authored-By: Claude <noreply@anthropic.com>
45 lines
1.5 KiB
YAML
45 lines
1.5 KiB
YAML
# Public certificates through DNS-01 for the zones below and HTTP-01 (Traefik) for
|
|
# every other domain, e.g. the .рф one. The credential Secrets are created by hand
|
|
# (they will move to Vaultwarden + External Secrets):
|
|
# kubectl -n cert-manager create secret generic cloudflare-api-token --from-literal=apiToken=<token>
|
|
# (Zone:DNS:Edit on the btwiusearch.net zone)
|
|
# kubectl -n cert-manager create secret generic aws-api-key-secret \
|
|
# --from-literal=accessKey=<id> --from-literal=secretKey=<secret>
|
|
# (Route53 access to the hexor.cy zone)
|
|
apiVersion: cert-manager.io/v1
|
|
kind: ClusterIssuer
|
|
metadata:
|
|
name: letsencrypt
|
|
spec:
|
|
acme:
|
|
server: https://acme-v02.api.letsencrypt.org/directory
|
|
email: k8s-master@hexor.cy
|
|
privateKeySecretRef:
|
|
name: letsencrypt-account-key
|
|
solvers:
|
|
- selector:
|
|
dnsZones:
|
|
- btwiusearch.net
|
|
dns01:
|
|
cloudflare:
|
|
apiTokenSecretRef:
|
|
name: cloudflare-api-token
|
|
key: apiToken
|
|
- selector:
|
|
dnsZones:
|
|
- hexor.cy
|
|
dns01:
|
|
route53:
|
|
region: eu-north-1
|
|
accessKeyIDSecretRef:
|
|
name: aws-api-key-secret
|
|
key: accessKey
|
|
secretAccessKeySecretRef:
|
|
name: aws-api-key-secret
|
|
key: secretKey
|
|
# Fallback for domains outside the zones above: their A records must point
|
|
# at the cluster nodes (Traefik answers on port 80 everywhere).
|
|
- http01:
|
|
ingress:
|
|
ingressClassName: traefik
|