infrastructure/longhorn.yaml

63 lines
1.4 KiB
YAML

---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
namespace: longhorn-system
name: letsencrypt-prod
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: florian@nocodelytics.com
privateKeySecretRef:
name: letsencrypt-prod
solvers:
- http01:
ingress:
class: traefik
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
namespace: longhorn-system
name: longhorn-system
spec:
secretName: longhorn-system-net-tls
issuerRef:
name: letsencrypt-prod
kind: Issuer
commonName: longhorn.nocodelytics.com
dnsNames:
- longhorn.nocodelytics.com
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
namespace: longhorn-system
name: longhorn-system-nginx-ingress
annotations:
traefik.ingress.kubernetes.io/router.middlewares: default-https-redirect@kubernetescrd,default-http-auth@kubernetescrd
spec:
rules:
- host: longhorn.nocodelytics.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: ssl-redirect
port:
name: use-annotation
- path: /
pathType: Prefix
backend:
service:
name: longhorn-frontend
port:
number: 80
tls:
- hosts:
- longhorn.nocodelytics.com
secretName: longhorn-system-net-tls