diff --git a/deployment/route96/templates/certificate.yaml b/deployment/route96/templates/certificate.yaml new file mode 100644 index 0000000..3a3afce --- /dev/null +++ b/deployment/route96/templates/certificate.yaml @@ -0,0 +1,28 @@ +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: blossom-certificate + namespace: blossom + labels: + app.kubernetes.io/part-of: blossom + app.kubernetes.io/managed-by: Helm +spec: + secretName: blossom-certificate + privateKey: + algorithm: RSA + encoding: PKCS1 + size: 2048 + duration: 2160h # 90d + renewBefore: 360h # 15d + isCA: false + usages: + - server auth + - client auth + subject: + organizations: + - cert-manager + dnsNames: + - blossom.verse.app + issuerRef: + name: letsencrypt-prod + kind: ClusterIssuer \ No newline at end of file diff --git a/deployment/route96/templates/ingress.yaml b/deployment/route96/templates/ingress.yaml index 1f0a8bf..de28c5c 100644 --- a/deployment/route96/templates/ingress.yaml +++ b/deployment/route96/templates/ingress.yaml @@ -4,12 +4,14 @@ kind: Ingress metadata: name: blossom-ingress namespace: blossom - annotations: - kubernetes.io/ingress.class: {{ .Values.ingress.className }} labels: app.kubernetes.io/part-of: blossom app.kubernetes.io/managed-by: Helm spec: + tls: + - hosts: + - {{ .Values.ingress.host }} + secretName: blossom-certificate rules: - host: {{ .Values.ingress.host }} http: @@ -21,4 +23,5 @@ spec: name: blossom-service port: number: 80 + ingressClassName: {{ .Values.ingress.className }} {{- end -}} \ No newline at end of file diff --git a/deployment/route96/templates/service.yaml b/deployment/route96/templates/service.yaml index c9eb5b7..c4de661 100644 --- a/deployment/route96/templates/service.yaml +++ b/deployment/route96/templates/service.yaml @@ -13,4 +13,4 @@ spec: - protocol: TCP port: 80 targetPort: 8000 - type: ClusterIP + type: ClusterIP \ No newline at end of file diff --git a/deployment/route96/values.yaml b/deployment/route96/values.yaml index c2b7f13..2b5fb25 100644 --- a/deployment/route96/values.yaml +++ b/deployment/route96/values.yaml @@ -21,6 +21,6 @@ service: port: 80 ingress: - enabled: false + enabled: true className: "nginx" - host: "blossom.plur.app" + host: "blossom.verse.app"