feat(cert-manager): Add Cloudns issuer and DNS-01 challenge support

- Introduced a new Cloudns issuer configuration for cert-manager.
- Created separate tasks for DNS-01 and HTTP-01 challenge issuers.
- Updated cert-manager tasks to include Cloudns provider and manage secrets.
- Refactored existing LetsEncrypt issuer registration to use new task structure.
- Added necessary Kubernetes resources for Cloudns integration, including RBAC and certificates.
- Updated Terraform configurations to support new DNS records and service changes.
- Adjusted deployment strategies for CoreDNS and Open WebUI applications.
This commit is contained in:
2025-06-07 20:39:38 +02:00
parent 3cda0b5624
commit 01bf71f8d2
25 changed files with 590 additions and 17396 deletions
+7 -3
View File
@@ -9,9 +9,13 @@ microk8s_lb_https_port: 443
microk8s_metallb_version: 0.14.9
# certificate manager
microk8s_issuer_email: webmaster@localhost.localdomain
microk8s_certmgr_letsencrypt_issuer_email: webmaster@localhost.localdomain
microk8s_certmgr_version: 1.14.5
microk8s_lets_encrypt_issuer: true
microk8s_certmgr_letsencrypt_http01: true
microk8s_certmgr_letsencrypt_dns01: false
microk8s_certmgr_letsencrypt_dns01_provider: "cloudns"
microk8s_cloudns_auth_id:
microk8s_cloudns_auth_password:
# microk8s specific
microk8s_channel: "{{ microk8s_k8s_version }}/stable"
@@ -38,6 +42,6 @@ microk8s_allowed_hosts: []
microk8s_iac_user: "provision"
microk8s_encryption_secret: "a13labs"
microk8s_encryption_secret: "UGIzZ0w5UENaOVp2YkttWDdDNlNtaDdNYUJVd0ttUTY="
microk8s_encryption_cfg: "/etc/microk8s_encryption.yaml"
microk8s_encryption_kms_socket: ""