Solve chicken/egg on cert-manager
This commit is contained in:
parent
18db56a37e
commit
4699ae2cb2
5 changed files with 75 additions and 35 deletions
|
@ -0,0 +1,33 @@
|
|||
---
|
||||
# 1. cert-manager Helm chart
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: cert-manager
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: "https://charts.jetstack.io"
|
||||
chart: "cert-manager"
|
||||
targetRevision: "v1.18.2"
|
||||
helm:
|
||||
releaseName: "cert-manager"
|
||||
values: |
|
||||
installCRDs: true
|
||||
extraArgs:
|
||||
- --dns01-recursive-nameservers-only
|
||||
- --dns01-recursive-nameservers=8.8.8.8:53,1.1.1.1:53
|
||||
destination:
|
||||
server: "https://kubernetes.default.svc"
|
||||
namespace: home-server
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ApplyOutOfSyncOnly=true
|
||||
- SkipHooks=false
|
||||
- SyncWave=0 # ensure cert-manager is installed first
|
||||
|
|
@ -1,38 +1,4 @@
|
|||
---
|
||||
# 1. cert-manager Helm chart
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: cert-manager
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: "https://charts.jetstack.io"
|
||||
chart: "cert-manager"
|
||||
targetRevision: "v1.18.2"
|
||||
helm:
|
||||
releaseName: "cert-manager"
|
||||
values: |
|
||||
installCRDs: true
|
||||
extraArgs:
|
||||
- --dns01-recursive-nameservers-only
|
||||
- --dns01-recursive-nameservers=8.8.8.8:53,1.1.1.1:53
|
||||
destination:
|
||||
server: "https://kubernetes.default.svc"
|
||||
namespace: home-server
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- ApplyOutOfSyncOnly=true
|
||||
- SkipHooks=false
|
||||
- SyncWave=0 # ensure cert-manager is installed first
|
||||
|
||||
---
|
||||
# 2. ClusterIssuer
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: ClusterIssuer
|
||||
metadata:
|
||||
|
@ -54,7 +20,6 @@ spec:
|
|||
key: hxme-update-key
|
||||
|
||||
---
|
||||
# 3. Certificate
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Certificate
|
||||
metadata:
|
42
applications/20-domain-names/dns.yaml
Normal file
42
applications/20-domain-names/dns.yaml
Normal file
|
@ -0,0 +1,42 @@
|
|||
---
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: ApplicationSet
|
||||
metadata:
|
||||
name: hxme-dns-deploy
|
||||
namespace: argocd
|
||||
spec:
|
||||
goTemplate: true
|
||||
generators:
|
||||
- list:
|
||||
elements:
|
||||
- name: certmanager-crds
|
||||
path: applications/20-domain-names/certmanager-a.yaml
|
||||
wave: 1
|
||||
- name: certmanager-not-crds
|
||||
path: applications/20-domain-names/certmanager-b.yaml
|
||||
wave: 2
|
||||
- name: bind
|
||||
path: applications/20-domain-names/bind
|
||||
wave: 3
|
||||
- name: externaldns
|
||||
path: applications/20-domain-names/externaldns
|
||||
wave: 3
|
||||
template:
|
||||
metadata:
|
||||
name: '{{.name}}'
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: 'https://repobase.net/j/home-server.git'
|
||||
targetRevision: HEAD
|
||||
path: '{{.path}}'
|
||||
destination:
|
||||
server: 'https://kubernetes.default.svc'
|
||||
namespace: database
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
- SyncWave={{.wave}}
|
Loading…
Add table
Add a link
Reference in a new issue