add tls

sjultra · Nov 21, 2023 · 3ac8deb · 3ac8deb
1 parent 86d6f4f
commit 3ac8deb
Show file tree

Hide file tree

Showing 4 changed files with 30 additions and 16 deletions.
diff --git a/helm/service/templates/cert.yaml b/helm/service/templates/cert.yaml
@@ -0,0 +1,12 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{ .Values.issuer.secretName }}
+  namespace: sammwise
+spec:
+  secretName: {{ .Values.issuer.secretName }}
+  issuerRef:
+    name: sammwise-issuer
+  commonName: {{ .Values.ingress.ingressDomain }}
+  dnsNames:
+  - {{ .Values.ingress.ingressDomain }}
diff --git a/helm/service/templates/issuer.yaml b/helm/service/templates/issuer.yaml
@@ -6,10 +6,10 @@ metadata:
   namespace: sammwise
 spec:
   acme:
-    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    server: https://acme-v02.api.letsencrypt.org/directory
     email: {{ .Values.issuer.issuerEmail }}
     privateKeySecretRef:
-      name: {{ .Values.issuer.secretName }}
+      name: {{ .Values.issuer.privateKeyName }}
     solvers:
     - http01:
         ingress:

diff --git a/helm/service/templates/sammwise.yaml b/helm/service/templates/sammwise.yaml
@@ -14,13 +14,13 @@ spec:
     spec:
       containers:
         - name: sammwise
-          image: {{ .Values.sammwise.image | quote }}
+          image: "{{ .Values.sammwise.image }}:{{ .Values.sammwise.tag }}"
           # {{- if .Values.sammwise.NEXT_PUBLIC_BASE_PATH }}
-          env:
-            - name: NEXT_PUBLIC_BASE_PATH
-              value: {{ .Values.sammwise.NEXT_PUBLIC_BASE_PATH | quote }}
-            - name: RANCHER_SERVER
-              value: {{ .Values.sammwise.RANCHER_SERVER | quote }}
+          # env:
+          #   - name: NEXT_PUBLIC_BASE_PATH
+          #     value: {{ .Values.sammwise.NEXT_PUBLIC_BASE_PATH | quote }}
+          #   - name: RANCHER_SERVER
+          #     value: {{ .Values.sammwise.RANCHER_SERVER | quote }}
 
           # {{- end }}
 ---

diff --git a/helm/service/values.yaml b/helm/service/values.yaml
@@ -3,14 +3,16 @@
 ingressHost: https://kubernetes.default.svc
 
 sammwise:
-  image: sjultra/sammwise:latest
+  image: sjultra/sammwise
+  tag: latest
   # port: 80
-  NEXT_PUBLIC_BASE_PATH: "/k8s/clusters/c-m-26nk9h9f/api/v1/namespaces/sammwise/services/http:sammwise:80/proxy"
-  RANCHER_SERVER: "https://rancher.vzxy.net"
+  # NEXT_PUBLIC_BASE_PATH: "/k8s/clusters/c-m-26nk9h9f/api/v1/namespaces/sammwise/services/http:sammwise:80/proxy"
+  # RANCHER_SERVER: "https://rancher.vzxy.net"
 
-# issuer:
-#   issuerEmail: [email protected]
-#   secretName: sammwise-tls-prod
+issuer:
+  issuerEmail: [email protected]
+  secretName: sammwise-tls-prod
+  privateKeyName: sammwise-tls-pkey-prod
 
-# ingress:
-#  ingressDomain: sammwise.vzxy.net
+ingress:
+ ingressDomain: sammwise.vzxy.net