fix: added letsencrypt default params

filipeforattini · Jun 5, 2022 · 6723d22 · 6723d22
1 parent bc096f9
commit 6723d22
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 2 deletions.
diff --git a/deploy/as-k8s/service.schema.yml b/deploy/as-k8s/service.schema.yml
@@ -60,6 +60,7 @@ ingress:
   domain:
     enable: true
     name: acme.io
+    email: security@acme.io
 
   alb:
     certificateArn: secret

diff --git a/deploy/as-k8s/service.yml b/deploy/as-k8s/service.yml
@@ -181,8 +181,25 @@ spec:
   ports: #@ servicePorts
 #@ end
 
----
 #@ if data.values.ingress.enable:
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: letsencrypt
+  namespace: #@ namespace
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    email: #@ data.values.ingress.domain.email
+    privateKeySecretRef:
+      name: letsencrypt
+    solvers:
+      - http01:
+          ingress:
+            class: nginx
+
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
@@ -209,7 +226,7 @@ spec:
 
   #@ if data.values.ingress.domain.enable:
   tls:
-    - secretName: #@ data.values.repository + "-" + data.values.deployment.name
+    - secretName: #@ "cert-" + data.values.repository
       hosts:
       - #@ "{}.{}.{}".format(data.values.repository, data.values.environment, data.values.ingress.domain.name)
   #@ end