Reference globals instead

This commit is contained in:
j 2025-07-10 12:23:43 +10:00
parent 152c521644
commit 0786edbead
2 changed files with 15 additions and 14 deletions

View file

@ -12,12 +12,12 @@ spec:
solvers: solvers:
- dns01: - dns01:
rfc2136: rfc2136:
nameserver: {{ .Values.rfc2136.nameserver | quote }} nameserver: {{ .Values.global.rfc2136.nameserver | quote }}
tsigKeyName: {{ .Values.rfc2136.tsigKeyName | quote }} tsigKeyName: {{ .Values.global.rfc2136.tsigKeyName | quote }}
tsigAlgorithm: {{ .Values.rfc2136.tsigAlgorithm | quote }} tsigAlgorithm: {{ .Values.global.rfc2136.tsigAlgorithm | quote }}
tsigSecretSecretRef: tsigSecretSecretRef:
name: {{ .Values.rfc2136.tsigSecretName | quote }} name: {{ .Values.global.rfc2136.tsigSecretName | quote }}
key: {{ .Values.rfc2136.tsigSecretKey | quote }} key: {{ .Values.global.rfc2136.tsigSecretKey | quote }}
--- ---
apiVersion: cert-manager.io/v1 apiVersion: cert-manager.io/v1
kind: Certificate kind: Certificate
@ -29,12 +29,12 @@ spec:
secretTemplate: secretTemplate:
annotations: annotations:
replicator.v1.mittwald.de/replication-allowed: "true" replicator.v1.mittwald.de/replication-allowed: "true"
replicator.v1.mittwald.de/replicate-to: "{{ .Values.replicatorNamespaces }}" replicator.v1.mittwald.de/replicate-to: "{{ .Values.global.replicatorNamespaces }}"
issuerRef: issuerRef:
name: {{ .Values.global.issuerName }} name: {{ .Values.global.issuerName }}
kind: ClusterIssuer kind: ClusterIssuer
commonName: {{ .Values.global.domain | quote }} commonName: {{ .Values.global.domain | quote }}
dnsNames: dnsNames:
- {{ .Values.global.domain | quote }} - {{ .Values.global.domain | quote }}
- "*."{{ .Values.global.domain | quote }} - "*.{{ .Values.global.domain }}"

View file

@ -4,11 +4,12 @@ global:
issuerName: letsencrypt-rfc2136 issuerName: letsencrypt-rfc2136
email: admin@hxme.net email: admin@hxme.net
rfc2136: rfc2136:
nameserver: hawke.hxst.com.au:53 nameserver: hawke.hxst.com.au:53
tsigKeyName: hxme-update-key tsigKeyName: hxme-update-key
tsigAlgorithm: HMACSHA512 tsigAlgorithm: HMACSHA512
tsigSecretName: hxme-update-key tsigSecretName: hxme-update-key
tsigSecretKey: hxme-update-key tsigSecretKey: hxme-update-key
replicatorNamespaces: "monitoring,authentik,nextcloud" replicatorNamespaces: "monitoring,authentik,nextcloud"