expose blossom publicly

deployment/route96/templates/certificate.yaml

@@ -0,0 +1,28 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: blossom-certificate
+  namespace: blossom
+  labels:
+    app.kubernetes.io/part-of: blossom
+    app.kubernetes.io/managed-by: Helm
+spec:
+  secretName: blossom-certificate
+  privateKey:
+    algorithm: RSA
+    encoding: PKCS1
+    size: 2048
+  duration: 2160h # 90d
+  renewBefore: 360h # 15d
+  isCA: false
+  usages:
+    - server auth
+    - client auth
+  subject:
+    organizations:
+      - cert-manager
+  dnsNames:
+  - blossom.verse.app
+  issuerRef:
+    name: letsencrypt-prod
+    kind: ClusterIssuer

deployment/route96/templates/ingress.yaml

@@ -4,12 +4,14 @@ kind: Ingress
 metadata:
   name: blossom-ingress
   namespace: blossom
-  annotations:
-    kubernetes.io/ingress.class: {{ .Values.ingress.className }}
   labels:
     app.kubernetes.io/part-of: blossom
     app.kubernetes.io/managed-by: Helm
 spec:
+  tls:
+    - hosts:
+      - {{ .Values.ingress.host }}
+      secretName: blossom-certificate
   rules:
     - host: {{ .Values.ingress.host }}
       http:
@@ -21,4 +23,5 @@ spec:
                 name: blossom-service
                 port:
                   number: 80
+  ingressClassName: {{ .Values.ingress.className }}
 {{- end -}}

deployment/route96/templates/service.yaml

@@ -13,4 +13,4 @@ spec:
     - protocol: TCP
       port: 80
       targetPort: 8000
-  type: ClusterIP
+  type: ClusterIP

deployment/route96/values.yaml

@@ -21,6 +21,6 @@ service:
   port: 80
 
 ingress:
-  enabled: false
+  enabled: true
   className: "nginx"
-  host: "blossom.plur.app"
+  host: "blossom.verse.app"