casa/services/cert-manager

cert-manager

• cloudflare
• api secrets
• Cluster Issuer
  • Staging
    • Deploy
    • Describe
  • Production
    • Deploy (Production)
    • Describe (Production)
• helm chart

cloudflare

api secrets

cloudflare-api-token.yaml.

set -a
source ./.env
set +a
envsubst < ./cloudflare-api-token.yaml \
| kubectl apply -n kube-system -f -

Cluster Issuer

Staging

Deploy

letsencrypt-clusterissuer-staging.yaml.

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-staging.yaml \
| kubectl apply -n kube-system -f -

Describe

kubectl describe clusterissuer letsencrypt-staging

Production

Deploy (Production)

letsencrypt-clusterissuer-prod.yaml.

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-prod.yaml \
| kubectl apply -n kube-system -f -

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-staging.yaml \
| kubectl apply -n kube-system -f -

Describe (Production)

kubectl describe clusterissuer letsencrypt-prod

Force cert refresh:

kubectl delete certificaterequest -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls
kubectl delete order  -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls

helm chart

Using flux for reconciliation.

  kubectl kustomize deploy/flux | kubectl apply -f -