cert-manager

cloudflare
api secrets
Cluster Issuer
- Staging
  - Deploy
  - Describe
- Production
  - Deploy (Production)
  - Describe (Production)
helm chart

cloudflare

api secrets

cloudflare-api-token.yaml.

set -a
source ./.env
set +a
envsubst < ./cloudflare-api-token.yaml \
| kubectl apply -n kube-system -f -

Cluster Issuer

Staging

Deploy

letsencrypt-clusterissuer-staging.yaml.

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-staging.yaml \
| kubectl apply -n kube-system -f -

Describe

kubectl describe clusterissuer letsencrypt-staging

Production

Deploy (Production)

letsencrypt-clusterissuer-prod.yaml.

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-prod.yaml \
| kubectl apply -n kube-system -f -

set -a
source ./.env
set +a
envsubst < ./letsencrypt-clusterissuer-staging.yaml \
| kubectl apply -n kube-system -f -

Describe (Production)

kubectl describe clusterissuer letsencrypt-prod

Force cert refresh:

kubectl delete certificaterequest -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls
kubectl delete order  -l cert-manager.io/certificate-name=monitoring-limbosolutions-com-tls

helm chart

helm repo add jetstack https://charts.jetstack.io  --force-update  
helm upgrade --install cert-manager jetstack/cert-manager \
--namespace kube-system \
--version=v1.20.2 \
--create-namespace \
--set crds.enabled=true