casa/services/cert-manager/README.md

cert-manager

• cloudflare
• api secrets
• Cluster Issuer
  • Staging
    • Deploy
    • Describe
  • Production
    • Deploy (Production)
    • Describe (Production)
• helm chart

cloudflare

api secrets

cloudflare-api-token.yaml.

set -a
source ./.env
set +a
envsubst < ./cloudflare-api-token.yaml \
| kubectl apply -n kube-system -f -

Cluster Issuer

Staging

Deploy

letsencrypt-clusterissuer-staging.yaml.

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-staging.yaml \
| kubectl apply -n kube-system -f -

Describe

kubectl describe clusterissuer letsencrypt-staging

Production

Deploy (Production)

letsencrypt-clusterissuer-prod.yaml.

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-prod.yaml \
| kubectl apply -n kube-system -f -

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-staging.yaml \
| kubectl apply -n kube-system -f -

Describe (Production)

kubectl describe clusterissuer letsencrypt-prod

Force cert refresh:

kubectl delete certificaterequest -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls
kubectl delete order  -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls

helm chart

helm repo add jetstack https://charts.jetstack.io  --force-update  
helm upgrade --install cert-manager jetstack/cert-manager \
--namespace kube-system \
--version=v1.20.2 \
--create-namespace \
--set crds.enabled=true