feat: remove wildcard cert and default cert for traefik - causing too many problems

2021-09-16 07:42:33 -04:00
1 parent 0fde65b0bd
commit f9f2a09adf
@@ -113,7 +113,7 @@ spec:
        tls:
          - hosts:
              - "hajimari.${SECRET_DOMAIN}"
-            secretName: hajimari
+            secretName: "hajimari-${SECRET_DOMAIN/./-}-tls"
    persistence:
      data:
        enabled: true
@@ -2,4 +2,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - traefik
-  - wildcard-certificate
@@ -14,7 +14,7 @@ spec:
  tls:
    - hosts:
        - "traefik.${SECRET_DOMAIN}"
-      secretName: "${SECRET_DOMAIN/./-}-tls"
+      secretName: "traefik-dashboard-${SECRET_DOMAIN/./-}-tls"
  rules:
    - host: "traefik.${SECRET_DOMAIN}"
      http:
@@ -25,4 +25,4 @@ spec:
              service:
                name: traefik
                port:
-                  number: 9000
+                  number: 9000
@@ -2,5 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - helm-release.yaml
-  - tls-store
  - dashboard
@@ -1,9 +0,0 @@
---
-apiVersion: traefik.containo.us/v1alpha1
-kind: TLSStore
-metadata:
-  name: default
-  namespace: networking
-spec:
-  defaultCertificate:
-    secretName: "${SECRET_DOMAIN/./-}-tls"
@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - default.yaml
@@ -1,15 +0,0 @@
---
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: "${SECRET_DOMAIN/./-}"
-  namespace: networking
-spec:
-  secretName: "${SECRET_DOMAIN/./-}-tls"
-  issuerRef:
-    name: letsencrypt-production
-    kind: ClusterIssuer
-  commonName: "${SECRET_DOMAIN}"
-  dnsNames:
-    - "${SECRET_DOMAIN}"
-    - "*.${SECRET_DOMAIN}"
@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - certificate.yaml
@@ -20,12 +20,11 @@ spec:
    webhook:
      enabled: true
    extraArgs:
-      - --dns01-recursive-nameservers=1.1.1.1:53
+      - --dns01-recursive-nameservers=1.1.1.1:53,9.9.9.9:53
      - --dns01-recursive-nameservers-only
-    cainjector:
-      replicaCount: 1
+    replicaCount: 1
    podDnsPolicy: "None"
    podDnsConfig:
      nameservers:
        - "1.1.1.1"
-        - "8.8.8.8"
+        - "9.9.9.9"
@@ -16,3 +16,6 @@ spec:
            apiTokenSecretRef:
              name: cloudflare-token-secret
              key: cloudflare-token
+        selector:
+          dnsZones:
+            - ${SECRET_DOMAIN}
@@ -16,3 +16,6 @@ spec:
            apiTokenSecretRef:
              name: cloudflare-token-secret
              key: cloudflare-token
+        selector:
+          dnsZones:
+            - ${SECRET_DOMAIN}