Skip to content

Commit f149f0c

Browse files
joepiojoepio
committed
Update cert-manager ClusterIssuers #421 
1 parent 51d5664 commit f149f0c

File tree

4 files changed

+159
-36
lines changed

4 files changed

+159
-36
lines changed

‎cert-manager-backup.yaml

+148
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,148 @@
1+
apiVersion: v1
2+
items:
3+
- apiVersion: certmanager.k8s.io/v1alpha1
4+
kind: ClusterIssuer
5+
metadata:
6+
creationTimestamp: "2019-06-11T12:03:29Z"
7+
generation: 2
8+
name: letsencrypt-prod
9+
resourceVersion: "4420204"
10+
uid: ed5aee33-8c40-11e9-a0dc-4201ac100005
11+
spec:
12+
acme:
13+
email: [email protected]
14+
http01: {}
15+
privateKeySecretRef:
16+
name: letsencrypt-prod
17+
server: https://acme-v02.api.letsencrypt.org/directory
18+
status:
19+
acme:
20+
uri: https://acme-v02.api.letsencrypt.org/acme/acct/59013461
21+
conditions:
22+
- lastTransitionTime: "2019-06-11T12:04:25Z"
23+
message: The ACME account was registered with the ACME server
24+
reason: ACMEAccountRegistered
25+
status: "True"
26+
type: Ready
27+
- apiVersion: certmanager.k8s.io/v1alpha1
28+
kind: ClusterIssuer
29+
metadata:
30+
creationTimestamp: "2019-08-07T11:43:42Z"
31+
generation: 4
32+
name: letsencrypt-staging
33+
resourceVersion: "21979354"
34+
uid: 9b486949-b908-11e9-ac9f-4201ac100006
35+
spec:
36+
acme:
37+
email: [email protected]
38+
http01: {}
39+
privateKeySecretRef:
40+
name: letsencrypt-staging
41+
server: https://acme-v02.api.letsencrypt.org/directory
42+
status:
43+
acme:
44+
uri: https://acme-v02.api.letsencrypt.org/acme/acct/62959956
45+
conditions:
46+
- lastTransitionTime: "2019-08-07T12:14:54Z"
47+
message: The ACME account was registered with the ACME server
48+
reason: ACMEAccountRegistered
49+
status: "True"
50+
type: Ready
51+
- apiVersion: certmanager.k8s.io/v1alpha1
52+
kind: Certificate
53+
metadata:
54+
creationTimestamp: "2021-10-08T10:49:09Z"
55+
generation: 3
56+
name: tls-certificate
57+
namespace: production
58+
ownerReferences:
59+
- apiVersion: extensions/v1beta1
60+
blockOwnerDeletion: true
61+
controller: true
62+
kind: Ingress
63+
name: ingress
64+
uid: 96c37819-ee65-11e9-8576-4201ac100007
65+
resourceVersion: "389886881"
66+
uid: 1f37bb6d-40a6-4c6e-a1e0-94e68318d3cb
67+
spec:
68+
acme:
69+
config:
70+
- domains:
71+
- api.openraadsinformatie.nl
72+
- api.openstateninformatie.nl
73+
- beta.openraadsinformatie.nl
74+
- static.openraadsinformatie.nl
75+
- id.openraadsinformatie.nl
76+
- zoek.openraadsinformatie.nl
77+
- zoek.openstateninformatie.nl
78+
- docs.openraadsinformatie.nl
79+
- ori.argu.co
80+
- openbesluitvorming.nl
81+
- www.openbesluitvorming.nl
82+
- api.openbesluitvorming.nl
83+
- id.openbesluitvorming.nl
84+
- docs.openbesluitvorming.nl
85+
http01:
86+
ingressClass: nginx
87+
dnsNames:
88+
- api.openraadsinformatie.nl
89+
- api.openstateninformatie.nl
90+
- beta.openraadsinformatie.nl
91+
- static.openraadsinformatie.nl
92+
- id.openraadsinformatie.nl
93+
- zoek.openraadsinformatie.nl
94+
- zoek.openstateninformatie.nl
95+
- docs.openraadsinformatie.nl
96+
- ori.argu.co
97+
- openbesluitvorming.nl
98+
- www.openbesluitvorming.nl
99+
- api.openbesluitvorming.nl
100+
- id.openbesluitvorming.nl
101+
- docs.openbesluitvorming.nl
102+
issuerRef:
103+
kind: ClusterIssuer
104+
name: letsencrypt-prod
105+
secretName: tls-certificate
106+
status:
107+
conditions:
108+
- lastTransitionTime: "2021-10-08T10:50:19Z"
109+
message: Certificate is up to date and has not expired
110+
reason: Ready
111+
status: "True"
112+
type: Ready
113+
notAfter: "2022-01-06T09:50:11Z"
114+
- apiVersion: certmanager.k8s.io/v1alpha1
115+
kind: Certificate
116+
metadata:
117+
creationTimestamp: "2019-08-07T12:16:05Z"
118+
generation: 25
119+
name: tls-certificate
120+
namespace: staging
121+
resourceVersion: "389869068"
122+
uid: 213b937b-b90d-11e9-ac9f-4201ac100006
123+
spec:
124+
acme:
125+
config:
126+
- domains:
127+
- beta.openraadsinformatie.nl
128+
http01:
129+
ingressClass: nginx
130+
commonName: beta.openraadsinformatie.nl
131+
dnsNames:
132+
- beta.openraadsinformatie.nl
133+
issuerRef:
134+
kind: ClusterIssuer
135+
name: letsencrypt-staging
136+
secretName: tls-certificate
137+
status:
138+
conditions:
139+
- lastTransitionTime: "2019-08-07T12:16:27Z"
140+
message: Certificate is up to date and has not expired
141+
reason: Ready
142+
status: "True"
143+
type: Ready
144+
notAfter: "2021-12-23T22:24:11Z"
145+
kind: List
146+
metadata:
147+
resourceVersion: ""
148+
selfLink: ""

‎deployment/production/certmanager-certificate.yaml

+1-19
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
1212
# See the License for the specific language governing permissions and
1313
# limitations under the License.
14-
apiVersion: certmanager.k8s.io/v1alpha1
14+
apiVersion: cert-manager.io/v1
1515
kind: Certificate
1616
metadata:
1717
name: tls-certificate
@@ -36,21 +36,3 @@ spec:
3636
- www.openbesluitvorming.nl
3737
- api.openbesluitvorming.nl
3838
- docs.openbesluitvorming.nl
39-
acme:
40-
config:
41-
- http01:
42-
ingressClass: nginx
43-
domains:
44-
- api.openraadsinformatie.nl
45-
- api.openstateninformatie.nl
46-
- beta.openraadsinformatie.nl
47-
- static.openraadsinformatie.nl
48-
- id.openraadsinformatie.nl
49-
- zoek.openraadsinformatie.nl
50-
- zoek.openstateninformatie.nl
51-
- docs.openraadsinformatie.nl
52-
- ori.argu.co
53-
- openbesluitvorming.nl
54-
- www.openbesluitvorming.nl
55-
- api.openbesluitvorming.nl
56-
- docs.openbesluitvorming.nl

‎deployment/production/certmanager-issuer.yaml

+6-17
Original file line numberDiff line numberDiff line change
@@ -1,25 +1,14 @@
1-
# Copyright 2018 Google Inc.
2-
#
3-
# Licensed under the Apache License, Version 2.0 (the "License");
4-
# you may not use this file except in compliance with the License.
5-
# You may obtain a copy of the License at
6-
#
7-
# https://www.apache.org/licenses/LICENSE-2.0
8-
#
9-
# Unless required by applicable law or agreed to in writing, software
10-
# distributed under the License is distributed on an "AS IS" BASIS,
11-
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12-
# See the License for the specific language governing permissions and
13-
# limitations under the License.
14-
apiVersion: certmanager.k8s.io/v1alpha1
1+
apiVersion: cert-manager.io/v1
152
kind: ClusterIssuer
163
metadata:
174
name: letsencrypt-prod
18-
namespace: production
195
spec:
206
acme:
7+
email: [email protected]
218
server: https://acme-v02.api.letsencrypt.org/directory
22-
email: '[email protected]'
239
privateKeySecretRef:
2410
name: letsencrypt-prod
25-
http01: {}
11+
solvers:
12+
- http01:
13+
ingress:
14+
class: nginx

‎maintenance_guide.md

+4
Original file line numberDiff line numberDiff line change
@@ -87,3 +87,7 @@
8787
- **loader** Responsible for writing data (e.g. elastic and linked-delta's)
8888
- **transformers** Responsible for mapping data
8989
- **enrichers** Extracting text from PDFs, adding locations, adding themes
90+
91+
### HTTPS (SSL / TLS certificates)
92+
93+
This project uses [`cert-manager`](https://cert-manager.io/docs/) for creating certificates.

0 commit comments

Comments
 (0)