feat(cert-manager): Add Cloudns issuer and DNS-01 challenge support
- Introduced a new Cloudns issuer configuration for cert-manager. - Created separate tasks for DNS-01 and HTTP-01 challenge issuers. - Updated cert-manager tasks to include Cloudns provider and manage secrets. - Refactored existing LetsEncrypt issuer registration to use new task structure. - Added necessary Kubernetes resources for Cloudns integration, including RBAC and certificates. - Updated Terraform configurations to support new DNS records and service changes. - Adjusted deployment strategies for CoreDNS and Open WebUI applications.
This commit is contained in:
+8
-2
@@ -113,8 +113,14 @@ microk8s_allowed_hosts:
|
||||
- 10.5.5.5
|
||||
microk8s_alt_names: "{{ hostname }}"
|
||||
|
||||
# Let's encrypt issuer
|
||||
microk8s_lets_encrypt_issuer: false
|
||||
microk8s_certmgr_letsencrypt_issuer_email: c.alexandre.pires@alexpires.me
|
||||
# HTTP-01 Let's encrypt issuer is disable in dev
|
||||
microk8s_certmgr_letsencrypt_http01: false
|
||||
# DNS-01 issuer is enabled in dev
|
||||
microk8s_certmgr_letsencrypt_dns01: true
|
||||
microk8s_cloudns_auth_id: "{{ lookup('env', 'CLOUDNS_AUTH_ID') }}"
|
||||
microk8s_cloudns_auth_password: "{{ lookup('env', 'CLOUDNS_PASSWORD') }}"
|
||||
|
||||
microk8s_encryption_secret: "{{ lookup('env', 'MICROK8S_ENCRYPTION_SECRET') }}"
|
||||
microk8s_users:
|
||||
- username: operator
|
||||
@@ -145,7 +145,7 @@ microk8s_allowed_hosts:
|
||||
microk8s_alt_names: "{{ hostname }}"
|
||||
|
||||
# Let's encrypt issuer
|
||||
microk8s_issuer_email: c.alexandre.pires@alexpires.me
|
||||
microk8s_certmgr_letsencrypt_issuer_email: c.alexandre.pires@alexpires.me
|
||||
microk8s_encryption_cfg: /mnt/microk8s_config/microk8s_encryption.yaml
|
||||
microk8s_encryption_secret: "{{ lookup('env', 'MICROK8S_ENCRYPTION_SECRET') }}"
|
||||
microk8s_encryption_kms_socket: /var/run/kmsplugin/socket.sock
|
||||
|
||||
+7
@@ -231,3 +231,10 @@ virt_machines:
|
||||
slot: "0x00",
|
||||
function: "0x0",
|
||||
}
|
||||
|
||||
cloudns_auth_id: "{{ lookup('env', 'CLOUDNS_AUTH_ID') }}"
|
||||
cloudns_auth_password: "{{ lookup('env', 'CLOUDNS_PASSWORD') }}"
|
||||
cloudns_nameserver: "109.201.133.111"
|
||||
certbot_email: c.alexandre.pires@alexpires.me
|
||||
certbot_domains:
|
||||
- "vh-01.lab.alexpires.me"
|
||||
Reference in New Issue
Block a user